Oracle.JInitiator.ActiveX.Control.Buffer.Overflow

Description

This indicates an attempt to exploit a stack based buffer overflow vulnerability in the Oracle JInitiator ActiveX control.
The vulnerability is caused by an error that occurs when the vulnerable software handles specially crafted initialization parameters. These allow a remote attacker to execute arbitrary code via a malicious web page.

Affected Products

Oracle JInitiator versions 1.x

Impact

System compromise: remote code execution.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

References