|
|
| |
Credit:
The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0110
The original article can be found at: http://www.securityfocus.com/bid/51452/discuss
|
| |
Vulnerable Systems:
*Oracle Outside In 8.3.7
*Oracle Outside In 8.3.5.0
Oracle Outside In is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.
The 'Outside In Image Export SDK' sub component is affected.
Vendor Status:
Orcale had since issued an update for this vulnerability.
Patch Availability:
http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
CVE Information:
CVE-2012-0110
Disclosure Timeline:
2012-January-23 Rev 3. Updated JD Edwards information for One World Tools SP24
2012-January-18 Rev 2. Updated credit information
2012-January-17 Rev 1. Initial Release
|
|
|
