← Back

CVE-2012-4857

nvd nist
Published: Dec 8, 2012Modified: Apr 29, 2026

JSON object

Loading...
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD

Description

Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.

Affected (30)

Ibm
1 product
Informix Dynamic Server
Configuration A
30 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Informix Dynamic Server
Version 11.50.xc1
Informix Dynamic Server
Version 11.50.xc2
Informix Dynamic Server
Version 11.50.xc3
Informix Dynamic Server
Version 11.50.xc3w1
Informix Dynamic Server
Version 11.50.xc4
Informix Dynamic Server
Version 11.50.xc4w1
Informix Dynamic Server
Version 11.50.xc5
Informix Dynamic Server
Version 11.50.xc5w2
Informix Dynamic Server
Version 11.50.xc5w3
Informix Dynamic Server
Version 11.50.xc5w4
Informix Dynamic Server
Version 11.50.xc6
Informix Dynamic Server
Version 11.50.xc6w1
Informix Dynamic Server
Version 11.50.xc6w2
Informix Dynamic Server
Version 11.50.xc6w3
Informix Dynamic Server
Version 11.50.xc6w4
Informix Dynamic Server
Version 11.50.xc7
Informix Dynamic Server
Version 11.50.xc7w1
Informix Dynamic Server
Version 11.50.xc7w2
Informix Dynamic Server
Version 11.50.xc7w3
Informix Dynamic Server
Version 11.50.xc7w4
Informix Dynamic Server
Version 11.50.xc8
Informix Dynamic Server
Version 11.50.xc8w1
Informix Dynamic Server
Version 11.50.xc8w2
Informix Dynamic Server
Version 11.50.xc8w3
Informix Dynamic Server
Version 11.50.xc8w4
Informix Dynamic Server
Version 11.50.xc9
Informix Dynamic Server
Version 11.50
Informix Dynamic Server
Version 11.70.xc1
Informix Dynamic Server
Version 11.70.xc2
Informix Dynamic Server
Version 11.70.xc3

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.