Oracle Spatial UI Infrastructure component Remote Security Vulnerability

Release date:
Updated on:

Affected Systems:
Oracle Oracle11g Standard Edition 11.2.0.1 R2
Oracle Oracle11g Standard Edition 11.1.0.7
Oracle Oracle11g Standard Edition 11.1. 7
Oracle Oracle11g Standard Edition 10.2.0.4
Oracle Oracle11g Standard Edition 10.2.0.4
Oracle Oracle11g Standard Edition 10.2.0.4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 45880
Cve id: CVE-2010-3590

Oracle spatial is a set of spatial data processing systems. It is a powerful core feature of Oracle databases. It contains the native data types used to store vector data types, raster data types, and continuous topology data.

The UI Infrastructure Component of Oracle spatial has a security vulnerability. Remote attackers can exploit this vulnerability through the Oracle Net protocol.

<* Source: Oracle
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Oracle
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.oracle.com