Oracle Siebel Option Pack for IE ActiveX控件内存初始化漏洞

CVE ID: CVE-2009-3737 Siebel Option Pack for IE是Oracle Siebel CRM软件所提供的ActiveX控件。 Siebel Option Pack for IE ActiveX控件没有正确地初始化由NewBusObj方式所使用的内存，用户受骗访问了恶意网页并用特制参数调用该方式就可能导致执行任意代码。 Oracle Siebel Option Pack for IE 7.x 临时解决方法： 将以下文本保存为.REG文件并导入： Windows Registry Editor Version 5.00...

Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability

Overview The Oracle Siebel Option Pack for IE ActiveX control fails to properly initialize memory, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Siebel Option Pack for IE is an ActiveX control that is provided by Oracle Siebel...

Oracle Siebel 7.x CRM (7.7, 7.8 tested) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Oracle Siebel 7.x CRM 7.7, 7.8 tested XSS Vulnerability ========================================================= ===================== I. BACKGROUND ===================== Siebel...

Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability

======================================================= Yaniv Miron aka "Lament" Advisory Feb 27, 2010 Oracle Siebel 7.x CRM 7.7, 7.8 tested Cross Site Scripting Vulnerability ======================================================= ===================== I. BACKGROUND ===================== Siebel...

Oracle Siebel 7.x CRM Cross Site Scripting

======================================================= Yaniv Miron aka "Lament" Advisory Feb 27, 2010 Oracle Siebel 7.x CRM 7.7, 7.8 tested Cross Site Scripting Vulnerability ======================================================= ===================== I. BACKGROUND ===================== Siebel...

Oracle Siebel 7.7/7.8 - '/loyalty_enu/start.swe' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Oracle Siebel 7.77.8 - loyalty_enustart.swe Cross-Site Scripting

Oracle Siebel 7.77.8 - loyaltyenustart.swe Cross-Site Scripting source: https://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Oracle Siebel Loyalty 8.1 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ============================================================ Oracle Siebel Loyalty 8.1 Cross Site Scripting Vulnerability ============================================================...

Oracle Siebel Loyalty 8.1 Cross Site Scripting

-------------------------------------------------------------------- Exploit Title: Oracle Siebel Loyalty 8.1 XSS Vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://bit.ly/bZ7JdV Version: 8.1 CVE : NA --------------------------------------------------- "Oracle Siebel...

Oracle Critical Patch Update Advisory - July 2009

Oracle Critical Patch Update Advisory - July 2009 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...

CVE-2009-1981

Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors...

Code injection

Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1981

Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1981

CVE-2009-1981 relates to the Siebel product suite, specifically the Highly Interactive Client component. The Siebel entry lists affected versions: 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0. The vulnerability is described as unspecified, allowing local users to affect confidentiality and integrity v...

CVE-2008-1831

Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka 1 SEBL01, 2 SEBL02, 3 SEBL03, 4 SEBL04, 5 SEBL05, and 6 SEBL06...

Code injection

Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka 1 SEBL01, 2 SEBL02, 3 SEBL03, 4 SEBL04, 5 SEBL05, and 6 SEBL06...

CVE-2008-1831

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2008-1831

Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka 1 SEBL01, 2 SEBL02, 3 SEBL03, 4 SEBL04, 5 SEBL05, and 6 SEBL06...

Stack overflow

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...