CVE-2007-5509
published 2007-10-17CVE-2007-5509: Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, aka DB06.
PriorityP424medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
2.05%
79.2th percentile
Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, aka DB06.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
| oracle | database_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3878-7xhc-2g3f: Unspecified vulnerability in the Spatial component in Oracle Database 9
ghsa_unreviewed·2022-05-01
CVE-2007-5509 [MEDIUM] GHSA-3878-7xhc-2g3f: Unspecified vulnerability in the Spatial component in Oracle Database 9
Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, aka DB06.
GHSA
GHSA-cf38-5cmw-7r2h: Buffer overflow in MDSYS
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-5897 [HIGH] CWE-119 GHSA-cf38-5cmw-7r2h: Buffer overflow in MDSYS
Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515, CVE-2007-5509, or CVE-2007-5505, but there are insufficient details to be sure.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=119332677525918&w=2http://secunia.com/advisories/27251http://secunia.com/advisories/27409http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.htmlhttp://www.securitytracker.com/id?1018823http://www.us-cert.gov/cas/techalerts/TA07-290A.htmlhttp://www.vupen.com/english/advisories/2007/3524http://www.vupen.com/english/advisories/2007/3626http://marc.info/?l=bugtraq&m=119332677525918&w=2http://secunia.com/advisories/27251http://secunia.com/advisories/27409http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.htmlhttp://www.securitytracker.com/id?1018823http://www.us-cert.gov/cas/techalerts/TA07-290A.htmlhttp://www.vupen.com/english/advisories/2007/3524http://www.vupen.com/english/advisories/2007/3626
2007-10-17
Published