CVE-2016-5558

Related Files

Oracle Outside In VwStreamRead() Buffer Overflow

Posted Nov 10, 2016

Authored by Behzad Najjarpour Jabbari | Site secunia.com

Secunia Research has discovered a vulnerability in Oracle Outside In, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error within the "VwStreamRead()" function (vssdw.dll), which can be exploited to cause a heap-based buffer overflow via a specially crafted SDW file. Successful exploitation may allow execution of arbitrary code. Oracle Outside In versions 8.4.0, 8.5.1, 8.5.2, and 8.5.3 are affected.

tags | advisory, overflow, arbitrary

advisories | CVE-2016-5558

SHA-256 | 78350c71c5f276b3da2aa8e819d6553d9cb28796c9ee72b50e2724bca05b1a3c

Download | Favorite | View