CVE-2012-4857 Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.
HighCVSS 9.0
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm informix dynamic server | = 11.50 | No fix listed |
| ibm informix dynamic server | = 11.50.xc1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc3w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc4w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5w3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc5w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc6w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w3 | No fix listed |
| ibm informix dynamic server | = 11.50.xc7w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8w1 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8w2 | No fix listed |
| ibm informix dynamic server | = 11.50.xc8w3 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm informix dynamic server | = 11.50.xc8w4 | No fix listed |
| ibm informix dynamic server | = 11.50.xc9 | No fix listed |
| ibm informix dynamic server | = 11.70.xc1 | No fix listed |
| ibm informix dynamic server | = 11.70.xc2 | No fix listed |
| ibm informix dynamic server | = 11.70.xc3 | No fix listed |
References
- 1027849 vdb-entry
- informix-sql-bo(79737) vdb-entry
- www.ibm.com vendor-advisory