CVE

Id
65738  
CVE No.
CVE-2013-5791  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to execute arbitrary code via a long field (aka column) name.  
Phase
Assigned (20130918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
640862 65738 CVE-2013-5791 EXPLOIT-DB:31222  View
640863 65738 CVE-2013-5791 URL:http://www.exploit-db.com/exploits/31222  View
640864 65738 CVE-2013-5791 MISC:http://www.citadelo.com/en/ms13-105-oracle-outside-in-mdb-parsing-vulnerability-cve-2013-5791/  View
640865 65738 CVE-2013-5791 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html  View
640866 65738 CVE-2013-5791 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21660640  View
640867 65738 CVE-2013-5791 MS:MS13-105  View
640868 65738 CVE-2013-5791 URL:http://technet.microsoft.com/security/bulletin/MS13-105  View
640869 65738 CVE-2013-5791 CERT-VN:VU#953241  View
640870 65738 CVE-2013-5791 URL:http://www.kb.cert.org/vuls/id/953241  View
640871 65738 CVE-2013-5791 BID:63076  View
640872 65738 CVE-2013-5791 URL:http://www.securityfocus.com/bid/63076  View
640873 65738 CVE-2013-5791 SECTRACK:1029190  View
640874 65738 CVE-2013-5791 URL:http://www.securitytracker.com/id/1029190  View
640875 65738 CVE-2013-5791 SECUNIA:56237  View
640876 65738 CVE-2013-5791 URL:http://secunia.com/advisories/56237  View
640877 65738 CVE-2013-5791 SECUNIA:56241  View
640878 65738 CVE-2013-5791 URL:http://secunia.com/advisories/56241  View
640879 65738 CVE-2013-5791 SECUNIA:56243  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23106 JVNDB-2013-004681 Oracle Siebel CRM の Siebel Core - EAI における Web Services に関する脆弱性 Oracle Siebel CRM の Siebel Core - EAI には、Web Services に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。 CVE-2013-5796 65738 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004681.html  View