CVE-2012-3334

EPSS 8.54%
Veröffentlicht 25.09.2012 20:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code via crafted arguments in a SET COLLATION statement.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Informix Dynamic Server Version11.50

Ibm ≫ Informix Dynamic Server Version11.50.xc1

Ibm ≫ Informix Dynamic Server Version11.50.xc2

Ibm ≫ Informix Dynamic Server Version11.50.xc3

Ibm ≫ Informix Dynamic Server Version11.50.xc3w1

Ibm ≫ Informix Dynamic Server Version11.50.xc4

Ibm ≫ Informix Dynamic Server Version11.50.xc4w1

Ibm ≫ Informix Dynamic Server Version11.50.xc5

Ibm ≫ Informix Dynamic Server Version11.50.xc5w2

Ibm ≫ Informix Dynamic Server Version11.50.xc5w3

Ibm ≫ Informix Dynamic Server Version11.50.xc5w4

Ibm ≫ Informix Dynamic Server Version11.50.xc6

Ibm ≫ Informix Dynamic Server Version11.50.xc6w1

Ibm ≫ Informix Dynamic Server Version11.50.xc6w2

Ibm ≫ Informix Dynamic Server Version11.50.xc6w3

Ibm ≫ Informix Dynamic Server Version11.50.xc6w4

Ibm ≫ Informix Dynamic Server Version11.50.xc7

Ibm ≫ Informix Dynamic Server Version11.50.xc7w1

Ibm ≫ Informix Dynamic Server Version11.50.xc7w2

Ibm ≫ Informix Dynamic Server Version11.50.xc7w3

Ibm ≫ Informix Dynamic Server Version11.50.xc7w4

Ibm ≫ Informix Dynamic Server Version11.50.xc8

Ibm ≫ Informix Dynamic Server Version11.50.xc8w1

Ibm ≫ Informix Dynamic Server Version11.50.xc8w2

Ibm ≫ Informix Dynamic Server Version11.50.xc8w3

Ibm ≫ Informix Dynamic Server Version11.50.xc8w4

Ibm ≫ Informix Dynamic Server Version11.50.xc9

Ibm ≫ Informix Dynamic Server Version11.50.xc9w1

Ibm ≫ Informix Dynamic Server Version11.70.xc1

Ibm ≫ Informix Dynamic Server Version11.70.xc2

Ibm ≫ Informix Dynamic Server Version11.70.xc3

Ibm ≫ Informix Dynamic Server Version11.70.xc4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.54%	0.915

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://osvdb.org/85736

http://www.ibm.com/support/docview.wss?uid=swg21611800

Vendor Advisory

http://www.securityfocus.com/bid/55668

https://exchange.xforce.ibmcloud.com/vulnerabilities/78277

https://nvd.nist.gov/vuln/detail/CVE-2012-3334

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3334

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3334

EUVD