CVE-2009-0215

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 36%

from disclosure to weapon596 days

Published on NVDMar 25

1st PoC+596d

metasploitMar 24

exploitation probability

36%top 2% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16517unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/52958 http://secunia.com/advisories/34470 https://exchange.xforce.ibmcloud.com/vulnerabilities/49409 http://www.kb.cert.org/vuls/id/340420 http://www.securityfocus.com/bid/34228 http://www.vupen.com/english/advisories/2009/0824