CVE-2012-0202

Published: May 4, 2012Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.

Affected (4)

Products: Ibm: Cognos Tm1

Ibm

1 product

Cognos Tm1

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Tm1	Version 9.4.1.3
Ibm Cognos Tm1	Version 9.4.1
Ibm Cognos Tm1	Version 9.5.1
Ibm Cognos Tm1	Version 9.5.2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

http://www-01.ibm.com/support/docview.wss?uid=swg21590314

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg24032164

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg24032165

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg24032166

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/73182

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21590314