Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-0418

Опубликовано: 17 янв. 2013
Источник: nvd
CVSS2: 6.8
EPSS Средний

Описание

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:exchange_server:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2010:sp2:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:fusion_middleware:8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.25098
Средний

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

github
почти 4 года назад

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value.

EPSS

Процентиль: 96%
0.25098
Средний

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo