Lucene search

[email protected]CVE-2012-3133

HistoryDec 21, 2012 - 5:46 a.m.

CVE-2012-3133

2012-12-2105:46:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2012-3133

buffer overflow

datadirect odbc driver

oracle hyperion

essbase server

nvd

security vulnerability

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.7%

JSON

Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 11.1.2.2, and Integration Services Server 11.1.2.1 and 11.1.2.2 has unknown impact and attack vectors.

CPENameOperatorVersion
oracle:hyperion_interactive_reportingoracle hyperion interactive reportingeq11.1.2.2
oracle:hyperion_interactive_reportingoracle hyperion interactive reportingeq11.1.2.1
oracle:essbase_serveroracle essbase servereq11.1.2.1
oracle:essbase_serveroracle essbase servereq11.1.2.2
oracle:hyperion_production_reporting_serveroracle hyperion production reporting servereq11.1.2.1
oracle:hyperion_production_reporting_serveroracle hyperion production reporting servereq11.1.2.2
oracle:integration_services_serveroracle integration services servereq11.1.2.2
oracle:integration_services_serveroracle integration services servereq11.1.2.1

CPE	Name	Operator	Version
oracle:hyperion_interactive_reporting	oracle hyperion interactive reporting	eq	11.1.2.2
oracle:hyperion_interactive_reporting	oracle hyperion interactive reporting	eq	11.1.2.1
oracle:essbase_server	oracle essbase server	eq	11.1.2.1
oracle:essbase_server	oracle essbase server	eq	11.1.2.2
oracle:hyperion_production_reporting_server	oracle hyperion production reporting server	eq	11.1.2.1
oracle:hyperion_production_reporting_server	oracle hyperion production reporting server	eq	11.1.2.2
oracle:integration_services_server	oracle integration services server	eq	11.1.2.2
oracle:integration_services_server	oracle integration services server	eq	11.1.2.1

References

blogs.oracle.com/sunsecurity/entry/cve_2012_3133_buffer_overflow

6.7 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.7%

JSON

Related for CVE-2012-3133

prion1 cvelist1 ibm1