Buffer overflow in Oracle Essbase Server
CVE-2012-3133
Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors.
Vulnerability class: Buffer Overflow
EPSS: 0.011 (62.2th percentile) — read the EPSS interpretation.
Affected products
- Oracle Essbase_server — versions 11.1.2.1, 11.1.2.2
- Oracle Hyperion_interactive_reporting — versions 11.1.2.1, 11.1.2.2
- Oracle Hyperion_production_reporting_server — versions 11.1.2.1, 11.1.2.2
- Oracle Integration_services_server — versions 11.1.2.1, 11.1.2.2
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)