DB: Oracle Fusion Middleware Outside In Excel File Parsing Integer Overflow

An integer overflow vulnerability exists in Oracle Outside In. The vulnerability is due to improper parsing of Excel files. When handling TxO records the code improperly wraps an integer value. This will result in an integer overflow causing a heap-based buffer overflow. A remote unauthenticated attacker can exploit this vulnerability by causing an application that uses the vulnerable library to handle a malformed Excel file. Depending on the application, user interaction may be required. Successful exploitation can result in arbitrary code execution in the context of the affected application.

References

URL: http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html

Short Name

DB:ORACLE:FUSION-XLS-IO

Severity

Major

Recommended

False

Recommended Action

Drop

DB: Oracle Fusion Middleware Outside In Excel File Parsing Integer Overflow

References

Found a potential security threat?