exploitDog

CVE-2011-5167

Опубликовано: 15 сент. 2012

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:hyperion_strategic_finance:*:*:*:*:*:*:*:*

Версия до 12.0 (включая)

cpe:2.3:a:oracle:hyperion_strategic_finance:11.1.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:tidestone:formula_one_activex_control:6.3.5.1:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.5847

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-6jfg-6x32-98jf

github

больше 3 лет назад

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.

EPSS

Процентиль: 98%

0.5847

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119