CVE-2012-4857: IBM Informix Dynamic Server

High severity, CVSS 9.0. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in IBM Informix 11.50 through 11.50.xC9W2 and 11.70 before 11.70.xC7 allows remote authenticated users to execute arbitrary code via a crafted SQL statement.

Affected products

• IBM Informix Dynamic Server: version 11.50 only; version 11.50.xc1 only; version 11.50.xc2 only; version 11.50.xc3 only; version 11.50.xc3w1 only; version 11.50.xc4 only; …

Published 2012-12-08. Last modified 2026-06-16.