Oracle Outside In Technology File Processing Vulnerability

Release date:
Updated on:

Affected Systems:
Oracle Outside In Technology 8.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-0794, CVE-2011-0808

Oracle Outside In Technology is a software development program for accessing, transforming, and controlling more than 500 unstructured file formats.

Oracle Outside In Technology has security vulnerabilities. Attackers can exploit these vulnerabilities to control applications using affected databases.

1) An error occurs in the vswk6.dll and sccut. dll modules when processing Lotus 123 files.

2) when processing the Microsoft CAB or OneNote (". onepkg") file, there is an error in the vswk6.dll and sccut. dll modules.

<* Source: Will Dormann
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Oracle
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.oracle.com/technetwork/topics/security/