CVE-2009-3160

Severity: high (CVSS 8.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-10 · updated 2026-06-16

Description

IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a "memory overwrite" issue.

Affected products

IBM Corporation WebSphere MQ: 6, 6.0, 6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0 (+11)

References

http://secunia.com/advisories/36647
http://www-01.ibm.com/support/docview.wss?uid=swg24024153
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
http://www.securityfocus.com/bid/36310
http://www.vupen.com/english/advisories/2009/2578
http://secunia.com/advisories/36647
http://www-01.ibm.com/support/docview.wss?uid=swg24024153
http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259
http://www.securityfocus.com/bid/36310
http://www.vupen.com/english/advisories/2009/2578

Get alerted when CVE-2009-3160 or the next vulnerability affects your stack