Oracle - Outside-In '.DOCX' File Parsing Memory Corruption
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | Security Bulletin: Two vulnerabilities exist in IBM FileNet Content Manager and IBM Content Foundation (CVE-2015-0474 and CVE-2015-0493) | 17 Jun 201812:11 | – | ibm |
| Security Bulletin: IBM Content Collector affected by vulnerabilities in Oracle Outside In Technology (CVE-2015-4809,CVE-2015-4811,CVE-2015-4877,CVE-2015-4878, CVE-2015-0474,CVE-2015-0493) | 17 Jun 201812:13 | – | ibm |
 | Oracle Fusion Middleware Outside In Technology Component Denial of Service Vulnerability | 19 Apr 201500:00 | – | cnvd |
| Oracle Fusion Middleware Outside In Technology Component Denial of Service Vulnerability | 23 Apr 201500:00 | – | cnvd |
 | CVE-2015-0474 | 16 Apr 201516:00 | – | cve |
| CVE-2015-0493 | 16 Apr 201516:00 | – | cve |
 | CVE-2015-0474 | 16 Apr 201516:00 | – | cvelist |
| CVE-2015-0493 | 16 Apr 201516:00 | – | cvelist |
 | EUVD-2015-0487 | 7 Oct 202500:30 | – | euvd |
| EUVD-2015-0506 | 7 Oct 202500:30 | – | euvd |
10
#####################################################################################
Title: Oracle Outside-In DOCX File Parsing Memory Corruption
Platforms: Windows
CVE:
Secunia:
{PRL}: 2015-04
Author: Francis Provencher (Protek Research Lab’s)
Website: http://www.protekresearchlab.com/
Twitter: @ProtekResearch
#####################################################################################
1) Introduction
2) Report Timeline
3) Technical details
4) POC
#####################################################################################
===============
1) Introduction
===============
Oracle Outside In Technology provides software developers with a comprehensive solution to access, transform, and control the contents of over 500 unstructured file formats. From the latest office suites, such as Microsoft Office 2007, to specialty formats and legacy files, Outside In Technology provides software developers with the tools to transform unstructured files into controllable information.
(http://www.oracle.com/us/technologies/embedded/025613.htm)
#####################################################################################
============================
2) Report Timeline
============================
2015-02-17: Francis Provencher from Protek Research Lab’s found the issue;
2015-02-18: Oracle Security Alerts confirmed the issue;
2015-04-15: Oracle release a Patch for this issue.
#####################################################################################
============================
3) Technical details
============================
The vulnerability is caused due to a certain value in a document, which can be exploited to corrupt memory via a specially crafted document.
Successful exploitation may allow execution of arbitrary code.
#####################################################################################
===========
4) POC
===========
http://protekresearchlab.com/exploits/PRL-2015-04.docx
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/36788.docxData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Oct 2016 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 21.5
EPSS0.009