CVE-2007-2117 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Oracle Database Server
3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.3%
top 48.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 18
Latest updateMay 1
Description
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12. NOTE: as of 20070424, Oracle has not disputed reliable claims that this involves a buffer overflow in the ctxsrv server daemon.
CVSS vector
AV:L/AC:L/C:C/I:C/A:CExploitability: 3.1 | Impact: 10.0