Executive Summary
Summary | |
---|---|
Title | Oracle Outside In CorelDRAW file parser stack buffer overflow |
Informations | |||
---|---|---|---|
Name | VU#103425 | First vendor Publication | 2011-07-19 |
Vendor | VU-CERT | Last vendor Modification | 2011-10-26 |
Severity (Vendor) | N/A | Revision | M |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:L/AC:M/Au:N/C:P/I:P/A:P) | |||
---|---|---|---|
Cvss Base Score | 4.4 | Attack Range | Local |
Cvss Impact Score | 6.4 | Attack Complexity | Medium |
Cvss Expoit Score | 3.4 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Vulnerability Note VU#103425Oracle Outside In CorelDRAW file parser stack buffer overflowOverviewOracle Outside In contains a stack buffer overflow in the CorelDRAW parser, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.I. DescriptionOracle Outside In is a set of libraries that can decode over 500 different file formats. Originally written by Stellent, Outside In is now part of Oracle. The Oracle Outside In libraries are used by a variety of applications, including Oracle Fusion Middleware, Guidance Encase Forensics, AccessData FTK, and Novell Groupwise.Outside In versions 8.3.5.5927 and 8.3.2.5927 and earlier fail to properly handle CorelDRAW data, which is handled by the imcdr2.flt library. These vulnerabilites are addressed in the Oracle Fusion Middleware Critical Patch Update July 2011. Please see Oracle Support Note 1323616.1 (valid Oracle CSI# required) for more details. If you are using an application that uses Outside In, please check with that application's vendor for updates. If updates for your application are not yet available, or if you wish to mitigate other vulnerabilities in Outside In, please consider the following workarounds:
Referenceshttp://www.kb.cert.org/vuls/id/520721 These vulnerabilities were reported by Will Dormann of the CERT/CC. This document was written by Will Dormann.
|
Original Source
Url : http://www.kb.cert.org/vuls/id/103425 |
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 2 |
SAINT Exploits
Description | Link |
---|---|
Oracle Outside In CDR File Parser Stack Buffer Overflow | More info here |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
73913 | Oracle Outside In Technology Outside In Filters CorelDRAW Parser CDR File Han... |
Snort® IPS/IDS
Date | Description |
---|---|
2019-12-10 | Oracle Outside-In library CorelDRAW parsing integer overflow attempt RuleID : 52114 - Revision : 1 - Type : FILE-OTHER |
2019-12-10 | Oracle Outside-In library CorelDRAW parsing integer overflow attempt RuleID : 52113 - Revision : 1 - Type : FILE-OTHER |
2014-01-10 | Oracle Outside In CorelDRAW file parser buffer overflow attempt RuleID : 21921 - Revision : 5 - Type : SERVER-ORACLE |
2014-01-10 | Oracle Outside In CorelDRAW file parser buffer overflow attempt RuleID : 21920 - Revision : 5 - Type : SERVER-ORACLE |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2011-10-07 | Name : An archiving application installed on the remote host has multiple vulnerabil... File : symantec_enterprise_vault_sym11-011.nasl - Type : ACT_GATHER_INFO |
Alert History
Date | Informations |
---|---|
2014-02-17 12:07:29 |
|
2013-05-11 00:56:49 |
|