Multiple Oracle Hyperion Products CVE-2012-3133 Buffer Overflow Vulnerability
BID:57261
Info
Multiple Oracle Hyperion Products CVE-2012-3133 Buffer Overflow Vulnerability
| Bugtraq ID: | 57261 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2012-3133 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 23 2012 12:00AM |
| Updated: | Aug 23 2012 12:00AM |
| Credit: | chandan |
| Vulnerable: |
Oracle Production Reporting Server 11.1.2.2 Oracle Production Reporting Server 11.1.2.1 Oracle Integration Services Server 11.1.2.2 Oracle Integration Services Server 11.1.2.1 Oracle Hyperion Interactive Reporting 11.1.2.2 Oracle Hyperion Interactive Reporting 11.1.2.1 Oracle Hyperion Essbase Server 11.1.2.2 Oracle Hyperion Essbase Server 11.1.2.1 |
| Not Vulnerable: | |
Discussion
Multiple Oracle Hyperion Products CVE-2012-3133 Buffer Overflow Vulnerability
Multiple Oracle Hyperion products are prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
An attacker can leverage this issue to execute arbitrary code within the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition.
The following products are vulnerable:
Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2
Hyperion Production Reporting Server 11.1.2.1 and 11.1.2.2
Hyperion Essbase Server 11.1.2.1 and 11.1.2.2
Hyperion Integration Services Server 11.1.2.1 and 11.1.2.2
Multiple Oracle Hyperion products are prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
An attacker can leverage this issue to execute arbitrary code within the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition.
The following products are vulnerable:
Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2
Hyperion Production Reporting Server 11.1.2.1 and 11.1.2.2
Hyperion Essbase Server 11.1.2.1 and 11.1.2.2
Hyperion Integration Services Server 11.1.2.1 and 11.1.2.2
Solution / Fix
Multiple Oracle Hyperion Products CVE-2012-3133 Buffer Overflow Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Multiple Oracle Hyperion Products CVE-2012-3133 Buffer Overflow Vulnerability
References:
References: