'; } else{ echo ''; } echo '
|
|
|||
| Rule General Information |
|---|
| Release Date: | 2021-03-26 | |
| Rule Name: | Oracle Document Capture EasyMail SMTP AddAttachment Buffer Overflow Vulnerability (CVE-2004-1364) | |
| Severity: | ||
| CVE ID: | ||
| Rule Protection Details |
|---|
| Description: | A stack buffer overflow vulnerability exists in Oracle Document Capture, which is integrated with Oracle Imaging and Process Management and Oracle Universal Content Management products. The vulnerability is due to a boundary error that can occur when parsing a crafted argument passed to the AddAttachment method of the EasyMail SMTP ActiveX component. Remote attackers can exploit this vulnerability by enticing target users to visit a malicious web page. Successful exploitation could lead to arbitrary code execution on the target system. | |
| Impact: | A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service. | |
| Affected OS: | Windows, Linux, Others | |
| Reference: | SecurityFocusBID:10871 http://www.us-cert.gov/cas/techalerts/TA04-245A.html http://www.kb.cert.org/vuls/id/316206 http://xforce.iss.net/xforce/xfdb/18658 |
|
| Solutions |
|---|
| Refer to the announcement or patch by the vendor: http://metalink.oracle.com/ |