{"api_version":"1","generated_at":"2026-07-24T18:40:50+00:00","cve":"CVE-2007-4467","urls":{"html":"https://cve.report/CVE-2007-4467","api":"https://cve.report/api/cve/CVE-2007-4467.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-4467","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-4467"},"summary":{"title":"CVE-2007-4467","description":"Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified \"initialization parameters.\" NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected.","state":"PUBLISHED","assigner":"certcc","published_at":"2007-08-31 00:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/479186/100/100/threaded","name":"http://www.securityfocus.com/archive/1/479186/100/100/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36310","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36310","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3007","name":"http://www.vupen.com/english/advisories/2007/3007","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/26644","name":"http://secunia.com/advisories/26644","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle JInitiator \"beans.ocx\" ActiveX Control Buffer Overflow Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/37711","name":"http://osvdb.org/37711","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1018618","name":"http://securitytracker.com/id?1018618","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle JInitiator ActiveX Buffer Overflow Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/474433","name":"http://www.kb.cert.org/vuls/id/474433","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"VU#474433 - Oracle JInitiator ActiveX control stack buffer overflows","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25473","name":"http://www.securityfocus.com/bid/25473","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle JInitiator ActiveX Control Multiple Buffer Overflow Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf","name":"http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Search | Integrigy","mime":"application/pdf","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4467","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4467","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"4467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jinitiator","cpe6":"1.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"4467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jinitiator","cpe6":"1.1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"4467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jinitiator","cpe6":"1.1.8.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"4467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jinitiator","cpe6":"1.1.8.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"4467","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"jinitiator","cpe6":"1.1.8.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:53:56.082Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf"},{"name":"oracle-jinitiator-beans-bo(36310)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36310"},{"name":"1018618","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1018618"},{"name":"ADV-2007-3007","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3007"},{"name":"26644","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26644"},{"name":"VU#474433","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/474433"},{"name":"37711","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/37711"},{"name":"25473","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25473"},{"name":"20070912 Oracle Jinitiator 1.1.8 Vulnerabilities CVE-2007-4467 - Additional Information","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/479186/100/100/threaded"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-08-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified \"initialization parameters.\" NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf"},{"name":"oracle-jinitiator-beans-bo(36310)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36310"},{"name":"1018618","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1018618"},{"name":"ADV-2007-3007","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3007"},{"name":"26644","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26644"},{"name":"VU#474433","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/474433"},{"name":"37711","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/37711"},{"name":"25473","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25473"},{"name":"20070912 Oracle Jinitiator 1.1.8 Vulnerabilities CVE-2007-4467 - Additional Information","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/479186/100/100/threaded"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@cert.org","ID":"CVE-2007-4467","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified \"initialization parameters.\" NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf","refsource":"MISC","url":"http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf"},{"name":"oracle-jinitiator-beans-bo(36310)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36310"},{"name":"1018618","refsource":"SECTRACK","url":"http://securitytracker.com/id?1018618"},{"name":"ADV-2007-3007","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3007"},{"name":"26644","refsource":"SECUNIA","url":"http://secunia.com/advisories/26644"},{"name":"VU#474433","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/474433"},{"name":"37711","refsource":"OSVDB","url":"http://osvdb.org/37711"},{"name":"25473","refsource":"BID","url":"http://www.securityfocus.com/bid/25473"},{"name":"20070912 Oracle Jinitiator 1.1.8 Vulnerabilities CVE-2007-4467 - Additional Information","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/479186/100/100/threaded"}]}}}},"cveMetadata":{"assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","assignerShortName":"certcc","cveId":"CVE-2007-4467","datePublished":"2007-08-31T00:00:00.000Z","dateReserved":"2007-08-22T00:00:00.000Z","dateUpdated":"2024-08-07T14:53:56.082Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-08-31 00:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jinitiator:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"0D77FD81-3F3C-4391-86CE-DA5B3CF28617"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jinitiator:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DB1DCB76-9BF3-48AA-99F6-D73699E21F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jinitiator:1.1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"5619E59D-F680-4AC7-B01F-3D034968B4F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jinitiator:1.1.8.16:*:*:*:*:*:*:*","matchCriteriaId":"2FBDF868-AD1B-4F74-B5A5-6FC15A2C8600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jinitiator:1.1.8.25:*:*:*:*:*:*:*","matchCriteriaId":"18F49E47-C59D-47CA-92F5-D103BF48797C"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"4467","Ordinal":"1","Title":"CVE-2007-4467","CVE":"CVE-2007-4467","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"4467","Ordinal":"1","NoteData":"Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified \"initialization parameters.\" NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected.","Type":"Description","Title":"CVE-2007-4467"},{"CveYear":"2007","CveId":"4467","Ordinal":"2","NoteData":"2007-08-30","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"4467","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}