Back to search
CVE-2007-0272
Published: Jan 17, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via unspecified vectors involving certain public procedures, aka DB05.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
23794
third-party-advisory
x_refsource_SECUNIA
22083
vdb-entry
x_refsource_BID
32911
vdb-entry
x_refsource_OSVDB
20070124 Oracle Multiple Buffer Overflows and DoS attacks in public procedures of MDSYS.MD
mailing-list
x_refsource_BUGTRAQ
http://www.appsecinc.com/resources/alerts/oracle/2007-05.shtml
x_refsource_MISC
20070718 Oracle Database Buffer overflows and Denial of service vulnerabilities in public procedures of MDSYS.MD (DB12)
mailing-list
x_refsource_BUGTRAQ
http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
x_refsource_CONFIRM
TA07-017A
third-party-advisory
x_refsource_CERT
oracle-cpu-jan2007(31541)
vdb-entry
x_refsource_XF
1017522
vdb-entry
x_refsource_SECTRACK
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now