CVE-2012-4857

EPSS 7.64%
Published 08.12.2012 15:55:01
Last modified 11.04.2025 00:51:21
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Informix Dynamic Server Version11.50

Ibm ≫ Informix Dynamic Server Version11.50.xc1

Ibm ≫ Informix Dynamic Server Version11.50.xc2

Ibm ≫ Informix Dynamic Server Version11.50.xc3

Ibm ≫ Informix Dynamic Server Version11.50.xc3w1

Ibm ≫ Informix Dynamic Server Version11.50.xc4

Ibm ≫ Informix Dynamic Server Version11.50.xc4w1

Ibm ≫ Informix Dynamic Server Version11.50.xc5

Ibm ≫ Informix Dynamic Server Version11.50.xc5w2

Ibm ≫ Informix Dynamic Server Version11.50.xc5w3

Ibm ≫ Informix Dynamic Server Version11.50.xc5w4

Ibm ≫ Informix Dynamic Server Version11.50.xc6

Ibm ≫ Informix Dynamic Server Version11.50.xc6w1

Ibm ≫ Informix Dynamic Server Version11.50.xc6w2

Ibm ≫ Informix Dynamic Server Version11.50.xc6w3

Ibm ≫ Informix Dynamic Server Version11.50.xc6w4

Ibm ≫ Informix Dynamic Server Version11.50.xc7

Ibm ≫ Informix Dynamic Server Version11.50.xc7w1

Ibm ≫ Informix Dynamic Server Version11.50.xc7w2

Ibm ≫ Informix Dynamic Server Version11.50.xc7w3

Ibm ≫ Informix Dynamic Server Version11.50.xc7w4

Ibm ≫ Informix Dynamic Server Version11.50.xc8

Ibm ≫ Informix Dynamic Server Version11.50.xc8w1

Ibm ≫ Informix Dynamic Server Version11.50.xc8w2

Ibm ≫ Informix Dynamic Server Version11.50.xc8w3

Ibm ≫ Informix Dynamic Server Version11.50.xc8w4

Ibm ≫ Informix Dynamic Server Version11.50.xc9

Ibm ≫ Informix Dynamic Server Version11.70.xc1

Ibm ≫ Informix Dynamic Server Version11.70.xc2

Ibm ≫ Informix Dynamic Server Version11.70.xc3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	7.64%	0.915

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.securitytracker.com/id?1027849

https://exchange.xforce.ibmcloud.com/vulnerabilities/79737

https://www.ibm.com/support/docview.wss?uid=swg21618994

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2012-4857

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4857

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4857

EUVD