CVEvulnerability

CVE-2010-4070

10.0 HIGH Published 2010-10-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-10-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-189

Description

Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.

Affected configurations

• ibm informix dynamic server 7.31 • ibm informix dynamic server 9.40.tc5 • ibm informix dynamic server 9.40.uc1 • ibm informix dynamic server 9.40.uc2 • ibm informix dynamic server 9.40.uc3 • ibm informix dynamic server 9.40.uc5 • ibm informix dynamic server 9.40.xc5 • ibm informix dynamic server 9.40.xc7 • ibm informix dynamic server 10.00 • ibm informix dynamic server 10.00.tc3tl • ibm informix dynamic server 10.00.xc1 • ibm informix dynamic server 10.00.xc2 • ibm informix dynamic server 10.00.xc3 • ibm informix dynamic server 10.00.xc4 • ibm informix dynamic server 10.00.xc5 • ibm informix dynamic server 10.00.xc6 • ibm informix dynamic server 10.00.xc7w1 • ibm informix dynamic server 10.00.xc8 • ibm informix dynamic server 10.00.xc9 • ibm informix dynamic server 10.00.xc10 • ibm informix dynamic server 11.10 • ibm informix dynamic server 11.10.tb4tl • ibm informix dynamic server 11.10.xc1 • ibm informix dynamic server 11.10.xc1de • ibm informix dynamic server 11.50

Related

Weakness · not in database (1)

References