CVE-2013-5791 - CERT CVE
ID CVE-2013-5791
Sažetak Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to execute arbitrary code via a long field (aka column) name.
Reference
CVSS
Base: 1.5
Impact: 2.9
Exploitability:2.7
Pristup
VektorSloženostAutentikacija
LOCAL MEDIUM SINGLE
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE PARTIAL
CVSS vektor AV:L/AC:M/Au:S/C:N/I:N/A:P
Zadnje važnije ažuriranje 12-10-2018 - 22:05
Objavljeno 16-10-2013 - 15:55