Security Bulletin: Multiple memory corruption vulnerabilities in IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium

Summary There are a number of memory corruption vulnerabilities around the loading of .anb files that have been addressed with a fix pack. Vulnerability Details CVEID: CVE-2020-4261 DESCRIPTION: IBM i2 Intelligent Analyis Platform could allow a local attacker to execute arbitrary code on the...

CVE-2020-4262

IBM i2 Analyst’s Notebook and IBM i2 Analyst’s Notebook Premium (9.2.1) are affected by CVE-2020-4262 due to memory corruption during loading of .anb files. A local attacker could exploit a specially crafted file to execute arbitrary code on the system. The IBM Security Bulletin confirms multiple...