CVE-2012-3334

Summary

CVE	CVE-2012-3334
State	PUBLISHED
Assigner	ibm
Source Priority	CVE Program / NVD first with legacy fallback
Published	2012-09-25 20:55:01 UTC
Updated	2026-04-29 01:13:23 UTC
Description	Stack-based buffer overflow in IBM Informix Dynamic Server (IDS) 11.50 before 11.50.xC9W2 and 11.70 before 11.70.xC5 allows remote authenticated users to execute arbitrary code via crafted arguments in a SET COLLATION statement.

Risk And Classification

Primary CVSS: v2.0 9 from [email protected]

AV:N/AC:L/Au:S/C:C/I:C/A:C

Problem Types: CWE-119 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Low

Authentication

Single

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:N/AC:L/Au:S/C:C/I:C/A:C

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Ibm	Informix Dynamic Server	11.50	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc1	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc2	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc3	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc3w1	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc4	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc4w1	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc5	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc5w2	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc5w3	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc5w4	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc6	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc6w1	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc6w2	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc6w3	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc6w4	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc7	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc7w1	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc7w2	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc7w3	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc7w4	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc8	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc8w1	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc8w2	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc8w3	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc8w4	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc9	All	All	All
Application	Ibm	Informix Dynamic Server	11.50.xc9w1	All	All	All
Application	Ibm	Informix Dynamic Server	11.70.xc1	All	All	All
Application	Ibm	Informix Dynamic Server	11.70.xc2	All	All	All
Application	Ibm	Informix Dynamic Server	11.70.xc3	All	All	All
Application	Ibm	Informix Dynamic Server	11.70.xc4	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
Security Bulletin: IBM Informix Dynamic Server SET COLLATION vulnerability (CVE-2012-3334).	af854a3a-2127-422b-91ae-364da2661108	www.ibm.com	Vendor Advisory
osvdb.org/85736	af854a3a-2127-422b-91ae-364da2661108	osvdb.org
IBM Informix Dynamic Server CVE-2012-3334 Remote Stack Buffer Overflow Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
IBM X-Force Exchange	af854a3a-2127-422b-91ae-364da2661108	exchange.xforce.ibmcloud.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.