Vulnerability in Oracle Fusion Middleware

CVE-2011-2264

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the July 2011 CPU. Oracle has not commented on claims from a reliable third party that this is a stack-based buffer overflow in the imcdr2.flt library for the CorelDRAW parser.

EPSS: 0.311 (98.1th percentile) — read the EPSS interpretation.

Affected products

Oracle Fusion_middleware — versions 8.3.2.0, 8.3.5.0
N/a — versions n/a

References

secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM)
secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert_us@oracle.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)