Japan Vulnerability NotesJVN:07497769JVN#07497769: Oracle Outside In vulnerable to buffer overflow
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.7%
Oracle Outside In is a library to decode over 500 file types. Oracle Outside In contains a buffer overflow vulnerability.
Impact
When Oracle Outside In processes a specially crafted Ichitaro Word Processor file, arbitrary code may be executed.
Solution
Apply an update
Update to the latest version according to the information provided by the developer.
Products Affected
- Oracle Outside In 8.3.7 and earlier
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.7%