Oracle Data Quality DateTimeWrapper onchange Remote Code Execution (CVE-2014-2416)

A remote code execution vulnerability has been reported in Oracle Data Profiling and Data Quality for Data Integrator. The vulnerability is due to dereferencing an arbitrary pointer within the TSS12.DscForms.DateTimeWrapper ActiveX control. A remote attacker can exploit this vulnerability by...

Oracle Data Quality DateTimeWrapper onchange Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Data Quality. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2014-4685

Name of the Vulnerable Software and Affected Versions Oracle Data Quality affected versions not specified Description The issue concerns a remote code execution vulnerability related to the DateTimeWrapper onchange event in Oracle Data Quality. Recommendations At the moment, there is no informati...