Security Bulletin: Multiple memory corruption vulnerabilities in IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium

Summary There are a number of memory corruption vulnerabilities around the loading of .anb files that have been addressed with a fix pack. Vulnerability Details CVEID: CVE-2020-4261 DESCRIPTION: IBM i2 Intelligent Analyis Platform could allow a local attacker to execute arbitrary code on the...

CVE-2020-4343

CVE-2020-4343 affects IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium v9.2.1. The IBM bulletin describes memory corruption as the root cause, allowing a remote attacker to execute arbitrary code or cause a crash by convincing a user to open a specially crafted file. Affected product...