Integer Overflow Vulnerability in IBM Informix Client SDK and Connect Runtime

CVE-2009-3691

Summary

Multiple integer overflow vulnerabilities in setnet32.exe version 3.50.0.13752 within IBM Informix Client SDK and Connect Runtime can be exploited by remote attackers. By crafting a malicious .nfx file that manipulates HostSize, ProtoSize, and ServerSize fields, an attacker may trigger a stack-based buffer overflow through the HostList field, potentially allowing for arbitrary code execution on the target system.

References