CVE-2010-4053

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-23 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in an unspecified logging function in oninit.exe in IBM Informix Dynamic Server (IDS) 11.10 before 11.10.xC2W2 and 11.50 before 11.50.xC1 allows remote authenticated users to execute arbitrary code via a crafted EXPLAIN directive, aka idsdb00154125 and idsdb00154243.

Affected products

IBM Informix Dynamic Server: 11.10, 11.50

References

http://secunia.com/advisories/41913
http://www.osvdb.org/68705
http://www.vupen.com/english/advisories/2010/2734
http://www.zerodayinitiative.com/advisories/ZDI-10-216/
https://exchange.xforce.ibmcloud.com/vulnerabilities/62619
http://secunia.com/advisories/41913
http://www.osvdb.org/68705
http://www.vupen.com/english/advisories/2010/2734
http://www.zerodayinitiative.com/advisories/ZDI-10-216/
https://exchange.xforce.ibmcloud.com/vulnerabilities/62619

Get alerted when CVE-2010-4053 or the next vulnerability affects your stack