Oracle.ODBC.Drivers.HOST.Arsqls24.Dll.Stack.Buffer.Overflow

Description

This indicates an attack attempt against a Buffer Overflow vulnerability in Oracle DataDirect ODBC Driver.
The vulnerability is caused by an error when the vulnerable software handles a malicious "HOST" property. It allows a remote attacker to execute arbitrary code via sending a crafted web page or cause a denial of service condition.

Affected Products

Oracle Hyperion Performance Management and BI (v11.1.2.1.0)

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

References