CVE-2009-4335

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-12-16 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in bundled stored procedures in the Spatial Extender component in IBM DB2 9.5 before FP5 have unknown impact and remote attack vectors, related to "remote exploits."

Affected products

IBM Db2 for Linux, UNIX and Windows: 9.5, 9.5-fp1, 9.5-fp2, 9.5-fp2a, 9.5-fp3, 9.5-fp3a (+3)

References

http://secunia.com/advisories/37759
http://www-01.ibm.com/support/docview.wss?uid=swg1IC62625
http://www-01.ibm.com/support/docview.wss?uid=swg21293566
http://www-01.ibm.com/support/docview.wss?uid=swg21412902
http://www.securityfocus.com/bid/37332
http://www.vupen.com/english/advisories/2009/3520
https://exchange.xforce.ibmcloud.com/vulnerabilities/55007
http://secunia.com/advisories/37759
http://www-01.ibm.com/support/docview.wss?uid=swg1IC62625
http://www-01.ibm.com/support/docview.wss?uid=swg21293566

Get alerted when CVE-2009-4335 or the next vulnerability affects your stack