A vulnerability has been reported in IBM Informix Dynamic Server, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to an error when processing certain unspecified SQL statements and can be exploited to cause a buffer overflow.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in version 11.50.xC9W2 and prior and version 11.70.xC7 and prior.

Solution
Update to a version with a fix greater than 11.50.xC9W2 or 11.70.xC7 or apply workaround.

Provided and/or discovered by
The vendor credits IOActive Inc.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM:
https://www.ibm.com/support/docview.wss?uid=swg21618994

IBM PSIRT:
https://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_buffer_overrun_vulnerability_when_executing_unspecified_sql_statements_in_ibm_informix_cve_2012_48577

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers