ID |
CVE-2013-5791
|
Sažetak |
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to execute arbitrary code via a long field (aka column) name. |
Reference |
|
CVSS |
Base: | 1.5 |
Impact: | 2.9 |
Exploitability: | 2.7 |
|
Pristup |
Vektor | Složenost | Autentikacija |
LOCAL |
MEDIUM |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
NONE |
NONE |
PARTIAL |
|
CVSS vektor |
AV:L/AC:M/Au:S/C:N/I:N/A:P |
Zadnje važnije ažuriranje |
12-10-2018 - 22:05 |
Objavljeno |
16-10-2013 - 15:55 |