CVE-2004-1774

Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.

Affected products

Oracle

Oracle Application Server

= 10.1.0.2

Oracle oracle10g

= enterprise_10.1.0.2, personal_10.1.0.2, standard_10.1.0.2

Fix

Available

CVSS 2.0

7.2 HIGH

EPSS

2.7% (84th percentile)

NVD status

Modified

Published

2005-04-19