CVE-2007-4467

Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters." NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected.

Link	Resource
http://www.kb.cert.org/vuls/id/474433	US Government Resource
http://www.securityfocus.com/bid/25473
http://securitytracker.com/id?1018618
http://secunia.com/advisories/26644	Vendor Advisory
http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf
http://osvdb.org/37711
http://www.vupen.com/english/advisories/2007/3007	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36310
http://www.securityfocus.com/archive/1/479186/100/100/threaded

Configuration 1

cpe:2.3:a:oracle:jinitiator:1.1.8.16:*:*:*:*:*:*:* cpe:2.3:a:oracle:jinitiator:1.1.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:jinitiator:1.1.8.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:jinitiator:1.1.8.25:*:*:*:*:*:*:* cpe:2.3:a:oracle:jinitiator:1.1.7:*:*:*:*:*:*:*

---

Published : 2007-08-31 12:17

Updated : 2018-10-15 09:35

---

NVD link : CVE-2007-4467

Mitre link : CVE-2007-4467

No products.

CWE-20