'; } else{ echo ''; } echo '
|
|||
Rule General Information |
---|
Release Date: | 2021-03-26 | |
Rule Name: | Oracle Document Capture EasyMail SMTP AddAttachment Buffer Overflow Vulnerability (CVE-2004-1364) | |
Severity: | ||
CVE ID: | ||
Rule Protection Details |
---|
Description: | A stack buffer overflow vulnerability exists in Oracle Document Capture, which is integrated with Oracle Imaging and Process Management and Oracle Universal Content Management products. The vulnerability is due to a boundary error that can occur when parsing a crafted argument passed to the AddAttachment method of the EasyMail SMTP ActiveX component. Remote attackers can exploit this vulnerability by enticing target users to visit a malicious web page. Successful exploitation could lead to arbitrary code execution on the target system. | |
Impact: | A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service. | |
Affected OS: | Windows, Linux, Others | |
Reference: | SecurityFocusBID:10871 http://www.us-cert.gov/cas/techalerts/TA04-245A.html http://www.kb.cert.org/vuls/id/316206 http://xforce.iss.net/xforce/xfdb/18658 |
|
Solutions |
---|
Refer to the announcement or patch by the vendor: http://metalink.oracle.com/ |