Oracle Outside In contains multiple exploitable vulnerabilities

🗓️ 17 Jul 2012 00:00:00Reported by CERTType

Oracle Outside In has multiple exploitable vulnerabilities in its parsers, allowing remote attackers to execute arbitrary code. Vulnerable file types include .VSD, .WSD, .JP2, .DOC, .SXD, .LWP, .PCX, .SXI, .DPT, .PDF, .SAM, .ODG, and .CDR. Apply Oracle Fusion Middleware Critical Patch Update July 2012 or use Microsoft Enhanced Mitigation Experience Toolkit

Reporter	Title	Published	Views	Family All 83
Circl	CVE-2012-1769	20 Jul 201200:00	–	circl
Circl	CVE-2012-1770	20 Jul 201200:00	–	circl
Check Point Advisories	Oracle Outside In JPEG 2000 QCD Segment Processing Heap Buffer Overflow (CVE-2012-1769)	14 Oct 201200:00	–	checkpoint_advisories
CVE	CVE-2012-1766	17 Jul 201222:39	–	cve
CVE	CVE-2012-1767	17 Jul 201222:39	–	cve
CVE	CVE-2012-1768	17 Jul 201222:39	–	cve
CVE	CVE-2012-1769	17 Jul 201222:39	–	cve
CVE	CVE-2012-1770	17 Jul 201222:39	–	cve
CVE	CVE-2012-1771	17 Jul 201222:39	–	cve
CVE	CVE-2012-1772	17 Jul 201222:39	–	cve

Source	Link
oracle	www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
oracle	www.oracle.com/us/technologies/embedded/025613.htm
oracle	www.oracle.com/us/corporate/Acquisitions/stellent/index.html
support	www.support.microsoft.com/kb/2458544
blogs	www.blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx
technet	www.technet.microsoft.com/en-us/security/bulletin/ms12-058

28 Apr 2014 18:27Current

6.7Medium risk

Vulners AI Score6.7

CVSS 22.1

EPSS0.09702