Oracle AutoVue DXF Parsing Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Oracle Autovue software versions 20.1.1 and 20.2. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, Oracle...

Design/Logic Flaw

Unspecified vulnerability in the Oracle AutoVue component in Oracle Supply Chain Products Suite 20.0.2 and 20.1 allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-1759...

CVE-2012-1759

Oracle AutoVue vulnerabilities CVE-2012-1758 and CVE-2012-1759 affect Oracle AutoVue in Oracle Supply Chain Products Suite 20.0.2/20.1. Affected components: DGN (CVE-2012-1758) and DXF (CVE-2012-1759) parsers. Root cause: handling of specially crafted files leading to heap corruption or stack exc...