CVE-2009-3691

no score yetEPSS 7.0%

ibm: no CVSS score yet. EPSS 7.0% chance of exploitation in the next 30 days.

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted (1) HostSize, and possibly (2) ProtoSize and (3) ServerSize, field that triggers a stack-based buffer overflow involving a crafted HostList field. NOTE: some of these details are obtained from third party information.

EPSS: 7.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2009-10-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:informix_client_sdk
ibm:informix_connect_runtime

References

http://retrogod.altervista.org/9sg_ibm_setnet32.html
http://secunia.com/advisories/36949
http://securitytracker.com/id?1022985
http://www.osvdb.org/58530
http://www.securityfocus.com/bid/36588

Check your stack JSON