Security Bulletin: IBM i2 Analysts' Notebook and IBM i2 Analysts' Notebook Premium Memory vulnerabilities

Summary Multiple memory corruption vulnerabilities have been found in the IBM i2 Analysts' Notebook, and IBM i2 Analysts' Notebook Premium. Please see linked CVE's for details. Vulnerability Details CVEID: CVE-2020-4549 DESCRIPTION: IBM i2 Analyst's Notebook could allow a local attacker to execut...

CVE-2020-4549

IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183317...

CVE-2020-4549

CVE-2020-4549 affects IBM i2 Analyst’s Notebook 9.2.1 (and IBM i2 Analyst’s Notebook Premium 9.2.1). The vulnerability is caused by memory corruption, allowing a local attacker to execute arbitrary code by convincing a user to open a specially crafted file. IBM’s bulletin notes the fix was applie...