Description

Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.

Remediation

References

CVE-2004-1774

Related Vulnerabilities

WordPress Plugin Woosaleskit Bar Cross-Site Scripting (1.0.0)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5502)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-1499)

WordPress Plugin Event Registration 'event_id' Parameter SQL Injection (5.32)

PHP version older than 5.2.6

Severity

High

Classification

CVE-2004-1774

Tags

Missing Update Known Vulnerabilities