CVE-2008-0768

high

Description

Multiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM Informix Storage Manager (ISM), as used in Informix Dynamic Server (IDS) 10.00.xC8 and earlier and 11.10.xC2 and earlier, allow attackers to execute arbitrary code via crafted XDR requests.

References

Advisories
More

https://exchange.xforce.ibmcloud.com/vulnerabilities/40018

http://www.securitytracker.com/id?1019281

http://www.securityfocus.com/bid/27485

http://secunia.com/advisories/28689

http://www.vupen.com/english/advisories/2008/0317

http://www-1.ibm.com/support/search.wss?rs=0&q=IC55041&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=IC55040&apar=only

http://www-01.ibm.com/support/docview.wss?uid=swg21294211

Details

Source: Mitre, NVD

Published: 2008-02-13

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 8.4

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.04099