PT-2012-2144
CVE-2011-5167
·
تاريخ النشر
2012-09-15
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Oracle Hyperion Strategic Finance versions 12.x and earlier
Description
A heap-based buffer overflow issue exists in the SetDevNames method of the Tidestone Formula One ActiveX control, allowing remote attackers to execute arbitrary code via a long string to the
DriverName parameter.Recommendations
For Oracle Hyperion Strategic Finance versions 12.x and earlier, consider restricting access to the Tidestone Formula One ActiveX control until a patch is available. As a temporary workaround, avoid using long strings for the
DriverName parameter to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾