Buffer overflow vulnerability in multiple Oracle's Hyperion Products

Release date:
Updated on:

Affected Systems:
Oracle company 11.1.2.2
Oracle company 11.1.2.1
Oracle Production Reporting Server 11.1.2.2
Oracle Production Reporting Server 11.1.2.1
Oracle Integration Services Server 11.1.2.2
Oracle Integration Services Server 11.1.2.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57261
CVE (CAN) ID: CVE-2012-3133
 
Oracle Hyperion is a solution for performance management and financial management.
 
Multiple Oracle Hyperion products, the buffer overflow vulnerability exists in the drivers used in Oracle Hyperion Interactive Reporting 11.1.2.1, 11.1.2.2, corner Server 11.1.2.1, 11.1.2.1, 11.1.2.2, Integration Services Server 11.1.2.1, and 11.1.2.2, attackers can execute arbitrary code in the context of a vulnerable application.
 
<* Source: chandan

Link: https://blogs.oracle.com/sunsecurity/entry/cve_2012_3133_buffer_overflow
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Oracle
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.oracle.com/technetwork/topics/security/