vendor:
Oracle Database Server
by:
c0ntex
7.5
CVSS
HIGH
Local Buffer Overflow
Buffer Overflow
CWE
Product Name: Oracle Database Server
Affected Version From: Release 2 Patch Set 3 Ver 9.2.0.4.0 for Linux x86
Affected Version To: Unknown
Patch Exists: YES
Related CWE:
CPE: oracle:database_server
Platforms Tested: Linux
Unknown
Oracle Database Server Local Buffer Overflow Vulnerability
A local attacker may overflow the bounds of an insufficient reserved buffer in oracle process memory, allowing them to trigger the execution of arbitrary instructions in the context of the vulnerable binary.
Mitigation:
Apply the latest patch set for Oracle Database Server.