CVE-2010-4070

IBM Informix Dynamic Server 7.x-11.10.xC2 - Remote Code Execution via Crafted Parameter

Title source: llm

Description

Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.

References (4)

Core 4

Core References

Third Party Advisory x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-10-215/

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/68706

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/2733

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/41915

Scores

EPSS 0.0524

EPSS Percentile 91.7%

Details

CWE

CWE-189

Status published

Products (25)

ibm/informix_dynamic_server 7.31

ibm/informix_dynamic_server 9.40.tc5

ibm/informix_dynamic_server 9.40.uc1

ibm/informix_dynamic_server 9.40.uc2

ibm/informix_dynamic_server 9.40.uc3

ibm/informix_dynamic_server 9.40.uc5

ibm/informix_dynamic_server 9.40.xc5

ibm/informix_dynamic_server 9.40.xc7

ibm/informix_dynamic_server 10.00

ibm/informix_dynamic_server 10.00.tc3tl

... and 15 more

Published Oct 25, 2010

Tracked Since Feb 18, 2026