{"id":"CVE-2009-0215","aliases":["EUVD-2009-0224","GHSA-3539-rp84-xw2w"],"status":"published","title":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control...","description":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.36309,"percentile":0.98493,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2009-03-25T15:00:00Z","modified":"2026-06-16T23:04:30Z","exploits":[{"source":"exploitdb","id":"EDB-16517","title":"IBM Access Support - ActiveX Control Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-11-11","verified":true,"url":"https://www.exploit-db.com/exploits/16517"},{"source":"metasploit","id":"exploit/windows/browser/ibmegath_getxmlvalue","title":"IBM Access Support ActiveX Control Buffer Overflow","type":"exploit","platform":"Windows","date":"2009-03-24","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/ibmegath_getxmlvalue"}],"products":[{"vendor":"ibm","product":"access_support_activex_control"}],"references":[{"url":"http://osvdb.org/52958","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49409","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/34470","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2009/0824","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34228","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/340420","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0215"},{"url":"https://github.com/advisories/GHSA-3539-rp84-xw2w"}],"sources":{"cve":[{"id":"CVE-2009-0215","description":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2009-03-25T15:00:00Z","modified":"2024-08-07T04:24:18.248Z","updated_at":"2026-11-02T14:33:25.516454Z"}],"euvd":[{"id":"EUVD-2009-0224","description":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2009-03-25T15:00:00Z","modified":"2024-08-07T04:24:18Z","updated_at":"2026-11-03T01:39:26.585153Z"}],"ghsa":[{"id":"GHSA-3539-rp84-xw2w","title":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control...","description":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2022-05-02T03:13:38Z","modified":"2023-01-31T05:07:03Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:49:08.279119Z"}],"nvd":[{"id":"CVE-2009-0215","description":"Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as distributed on IBM and Lenovo computers, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2009-03-25T15:30:00.217Z","modified":"2026-06-16T23:04:30.82Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:34.44527Z"}]}}