{"id":"CVE-2009-3160","aliases":["EUVD-2009-3143","GHSA-vgcq-wc9x-jmjv"],"status":"published","title":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or...","description":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue.","severity":{"version":"2.0","score":8.8,"vector":"AV:N/AC:M/Au:N/C:N/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01548,"percentile":0.75209,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2009-09-10T18:00:00Z","modified":"2026-06-16T23:11:02Z","products":[{"vendor":"ibm","product":"websphere_mq"}],"references":[{"url":"http://www.vupen.com/english/advisories/2009/2578","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24024153","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36310","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IZ56259","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://secunia.com/advisories/36647","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3160"},{"url":"https://github.com/advisories/GHSA-vgcq-wc9x-jmjv"}],"sources":{"cve":[{"id":"CVE-2009-3160","description":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue.","status":"published","published":"2009-09-10T18:00:00Z","modified":"2024-08-07T06:14:56.377Z","updated_at":"2026-11-02T14:33:24.10565Z"}],"euvd":[{"id":"EUVD-2009-3143","description":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue.","status":"published","published":"2009-09-10T18:00:00Z","modified":"2024-08-07T06:14:56Z","updated_at":"2026-11-03T01:39:14.567966Z"}],"ghsa":[{"id":"GHSA-vgcq-wc9x-jmjv","title":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or...","description":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue.","status":"published","published":"2022-05-02T03:42:12Z","modified":"2023-01-31T05:07:45Z","updated_at":"2026-11-02T14:49:16.50772Z"}],"nvd":[{"id":"CVE-2009-3160","description":"IBM WebSphere MQ 6.x through 6.0.2.7, 7.0.0.0, 7.0.0.1, 7.0.0.2, and 7.0.1.0, when read ahead or asynchronous message consumption is enabled, allows attackers to have an unspecified impact via unknown vectors, related to a \"memory overwrite\" issue.","status":"published","published":"2009-09-10T18:30:00.577Z","modified":"2026-06-16T23:11:02.857Z","cvss":[{"version":"2.0","score":8.8,"vector":"AV:N/AC:M/Au:N/C:N/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:36.596719Z"}]}}