CVE-2012-0711
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM...
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
- Record
CVE-2012-0711- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
- Record
CVE-2012-0711- Updated
- 2026-11-02
EUVDEUVD-2012-0743 No score
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
- Record
EUVD-2012-0743- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8xv-6785-4jvr No score
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM...
Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that triggers a heap-based buffer overflow.
- Record
GHSA-r8xv-6785-4jvr- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0711 is a high vulnerability (CVSS 7.5) in Ibm Db2, published March 20, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.52%, the 91st percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/73495
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14842
securityfocus.com/bid/77826
www-01.ibm.com/support/docview.wss?uid=swg21588093
nvd.nist.gov/vuln/detail/CVE-2012-0711
github.com/advisories/GHSA-r8xv-6785-4jvr