CVEvulnerability
CVE-2009-3737
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-08-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document.
Affected configurations
• oracle siebel option pack ie activex control
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://secunia.com/advisories/40804 Vendor Advisory
- http://www.kb.cert.org/vuls/id/174089 US Government Resource
- http://www.osvdb.org/66926 www.osvdb.org
- http://www.vupen.com/english/advisories/2010/2028 Vendor Advisory
- http://secunia.com/advisories/40804 Vendor Advisory
- http://www.kb.cert.org/vuls/id/174089 US Government Resource
- http://www.osvdb.org/66926 www.osvdb.org
- http://www.vupen.com/english/advisories/2010/2028 Vendor Advisory