Back to search
CVE-2009-3737
Published: Aug 17, 2010
Modified: Sep 16, 2024
PUBLISHED
Description
The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
ADV-2010-2028
vdb-entry
x_refsource_VUPEN
66926
vdb-entry
x_refsource_OSVDB
40804
third-party-advisory
x_refsource_SECUNIA
VU#174089
third-party-advisory
x_refsource_CERT-VN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now