CVE-2007-0272: Buffer Overflow
Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or execute arbitrary code via unspecified vectors involving certain public procedures, aka DB05.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0272?
CVE-2007-0272 has a critical severity level as it allows remote authenticated users to execute arbitrary code or cause a denial of service.
How do I fix CVE-2007-0272?
To fix CVE-2007-0272, upgrade to a later version of Oracle Database that is not vulnerable to this buffer overflow issue.
Who is affected by CVE-2007-0272?
CVE-2007-0272 affects users of Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4.
What are the potential impacts of exploiting CVE-2007-0272?
Exploiting CVE-2007-0272 could lead to a denial of service condition or execution of arbitrary code on the affected database.
What types of vulnerabilities are described in CVE-2007-0272?
CVE-2007-0272 describes multiple buffer overflow vulnerabilities in the MDSYS.MD package of Oracle Database.