CVEvulnerability

CVE-2007-4467

9.3 HIGH Published 2007-08-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-08-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters." NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected.

Affected configurations

• oracle jinitiator 1.1.5 • oracle jinitiator 1.1.7 • oracle jinitiator 1.1.8.3 • oracle jinitiator 1.1.8.16 • oracle jinitiator 1.1.8.25

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References