Description

Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.

Remediation

References

CVE-2004-1774

Related Vulnerabilities

Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928)

Oracle Database Server Other Vulnerability (CVE-2002-0840)

WordPress Plugin Simple Feature Requests Free Unspecified Vulnerability (1.0.4)

WordPress Plugin Random Banner Cross-Site Scripting (4.1.4)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2190)

Severity

High

Classification

CVE-2004-1774

Tags

Missing Update Known Vulnerabilities