CVE-2012-0202

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 54.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-05-04 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted data.

Affected products

IBM Cognos TM1: 9.4.1, 9.4.1.3, 9.5.1, 9.5.2

References

http://www-01.ibm.com/support/docview.wss?uid=swg21590314
http://www-01.ibm.com/support/docview.wss?uid=swg24032164
http://www-01.ibm.com/support/docview.wss?uid=swg24032165
http://www-01.ibm.com/support/docview.wss?uid=swg24032166
https://exchange.xforce.ibmcloud.com/vulnerabilities/73182
http://www-01.ibm.com/support/docview.wss?uid=swg21590314
http://www-01.ibm.com/support/docview.wss?uid=swg24032164
http://www-01.ibm.com/support/docview.wss?uid=swg24032165
http://www-01.ibm.com/support/docview.wss?uid=swg24032166
https://exchange.xforce.ibmcloud.com/vulnerabilities/73182

Get alerted when CVE-2012-0202 or the next vulnerability affects your stack