CVE-2004-1774 in Oracle10ginfo

Summary

Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

04/19/2005

Disclosure

08/31/2004

Entries

1

CPE

ready

Exploit

Download

CVSS

9.3

EPSS

0.07660

CTI

0.00

Sources

Interested in the pricing of exploits?

See the underground prices here!