CVE-2011-5167

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Strategic Finance versions 12.x and earlier

Description A heap-based buffer overflow issue exists in the SetDevNames method of the Tidestone Formula One ActiveX control, allowing remote attackers to execute arbitrary code via a long string to the DriverName parameter.

Recommendations For Oracle Hyperion Strategic Finance versions 12.x and earlier, consider restricting access to the Tidestone Formula One ActiveX control until a patch is available. As a temporary workaround, avoid using long strings for the DriverName parameter to minimize the risk of exploitation.