CVE-2012-4857: Buffer Overflow
Published Dec 8, 2012
·Updated
Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.
Affected Software
30 affected components
IBM Informix Dynamic Server=11.50
IBM Informix Dynamic Server=11.50.xc1
IBM Informix Dynamic Server=11.50.xc2
IBM Informix Dynamic Server=11.50.xc3
IBM Informix Dynamic Server=11.50.xc3w1
IBM Informix Dynamic Server=11.50.xc4
IBM Informix Dynamic Server=11.50.xc4w1
IBM Informix Dynamic Server=11.50.xc5
IBM Informix Dynamic Server=11.50.xc5w2
IBM Informix Dynamic Server=11.50.xc5w3
IBM Informix Dynamic Server=11.50.xc5w4
IBM Informix Dynamic Server=11.50.xc6
IBM Informix Dynamic Server=11.50.xc6w1
IBM Informix Dynamic Server=11.50.xc6w2
IBM Informix Dynamic Server=11.50.xc6w3
IBM Informix Dynamic Server=11.50.xc6w4
IBM Informix Dynamic Server=11.50.xc7
IBM Informix Dynamic Server=11.50.xc7w1
IBM Informix Dynamic Server=11.50.xc7w2
IBM Informix Dynamic Server=11.50.xc7w3
IBM Informix Dynamic Server=11.50.xc7w4
IBM Informix Dynamic Server=11.50.xc8
IBM Informix Dynamic Server=11.50.xc8w1
IBM Informix Dynamic Server=11.50.xc8w2
IBM Informix Dynamic Server=11.50.xc8w3
IBM Informix Dynamic Server=11.50.xc8w4
IBM Informix Dynamic Server=11.50.xc9
IBM Informix Dynamic Server=11.70.xc1
IBM Informix Dynamic Server=11.70.xc2
IBM Informix Dynamic Server=11.70.xc3
Event History
Dec 8, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4857?
CVE-2012-4857 has a critical severity level due to its potential to allow remote code execution.
2
How do I fix CVE-2012-4857?
To fix CVE-2012-4857, upgrade IBM Informix to a patched version that addresses the buffer overflow vulnerability.
3
Who is affected by CVE-2012-4857?
CVE-2012-4857 affects IBM Informix Dynamic Server versions 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7.
4
What type of vulnerability is CVE-2012-4857?
CVE-2012-4857 is classified as a buffer overflow vulnerability that can be exploited by remote authenticated users.
5
What are the potential impacts of CVE-2012-4857?
Potential impacts of CVE-2012-4857 include unauthorized remote code execution and potential compromise of the affected system.