HTTP: Oracle Outside In OS 2 Metafile Parser Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Oracle Outside-In. The vulnerability is due to a boundary error while processing OS/2 Metafiles. Oracle Outside-In is embedded in many enterprise applications. This vulnerability can be exploited by causing an application that uses the vulnerable libraries to handle a malformed files. Depending on the application, user interaction may be required. Successful exploitation can result in execution of arbitrary code or a denial of service condition in the context of the affected application.

Extended Description

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of this issue erroneously mapped it to CVE-2013-3624.

Affected Products

Oracle fusion_middleware

References

BugTraq: 64825

CVE: CVE-2013-5879

URL: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Short Name

HTTP:ORACLE:OUTSIDEIN-MET-BOF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Oracle Outside In OS 2 Metafile Parser Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?