Security Bulletin: Multiple memory corruption vulnerabilities in IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium

Summary There are a number of memory corruption vulnerabilities around the loading of .anb files that have been addressed with a fix pack. Vulnerability Details CVEID: CVE-2020-4261 DESCRIPTION: IBM i2 Intelligent Analyis Platform could allow a local attacker to execute arbitrary code on the...

CVE-2020-4261

The connected IBM bulletin confirms CVE-2020-4261 affects IBM i2 Analyst’s Notebook and IBM i2 Analyst’s Notebook Premium (version 9.2.1). Root cause: memory corruption during loading of .anb files, enabling a local attacker to execute arbitrary code by tricking a user into opening a crafted file...