Vulnerability in Oracle Fusion Middleware
CVE-2013-5791
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to execute arbitrary code via a long field (aka column) name.
EPSS: 0.019 (77.5th percentile) — read the EPSS interpretation.
Affected products
- Oracle Fusion_middleware — versions 8.4, 8.4.1
- N/a — versions n/a
References
- secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)
- secalert_us@oracle.com (x_refsource_MISC)
- secalert_us@oracle.com (x_refsource_CONFIRM)
- secalert_us@oracle.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)
- secalert_us@oracle.com (x_refsource_MS, vendor-advisory)
- secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
- secalert_us@oracle.com (exploit, x_refsource_EXPLOIT-DB)
- secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)