CVE-2015-0493

Related Files

Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow

Posted Apr 19, 2015

Authored by Dmitry Janushkevich | Site secunia.com

Secunia Research has discovered a vulnerability in Oracle Outside In, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a sign extension error in ibpsd2.dll when processing PSD files, which can be exploited to cause a heap-based buffer overflow. Successful exploitation of the vulnerability may allow execution of arbitrary code. Oracle Outside In versions 8.4.1, 8.5.0, and 8.5.1 are affected.

tags | advisory, overflow, arbitrary

advisories | CVE-2015-0493

SHA-256 | 881fefe28d05888ab8bb824adc584939c717d9e3fd0ffb3517681895051b5cb4

Download | Favorite | View