CVE-2010-4070: IBM Informix Dynamic Server

High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days.

Integer overflow in librpc.dll in portmap.exe (aka the ISM Portmapper service) in ISM before 2.20.TC1.117 in IBM Informix Dynamic Server (IDS) 7.x before 7.31.xD11, 9.x before 9.40.xC10, 10.00 before 10.00.xC8, and 11.10 before 11.10.xC2 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted parameter size, aka idsdb00146931, idsdb00146930, idsdb00146929, and idsdb00138308.

Affected products

• IBM Informix Dynamic Server: version 7.31 only; version 9.40.tc5 only; version 9.40.uc1 only; version 9.40.uc2 only; version 9.40.uc3 only; version 9.40.uc5 only; …

Published 2010-10-25. Last modified 2026-06-16.