CVE-2011-0794: Medium severity oracle fusion middleware vulnerability

Published Apr 20, 2011

Updated

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commented on claims from a reliable third party that this issue is in (a) sccut.dll or (b) libscut.so in Outside In 8.3.5.x through 8.3.5.5684, as used when using the CAB file identification functionality to parse OneNote (.onepkg) files and other formats.

Affected Software

1 affected component

Oracle Fusion Middleware=8.3.5.0

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html

Event History

Apr 20, 2011

CVE Published

via MITRE·03:09 AM

Data Sourced

via MITRE·03:09 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0794?

CVE-2011-0794 is a vulnerability that may affect the confidentiality, integrity, and availability of local users.

What software is affected by CVE-2011-0794?

CVE-2011-0794 specifically affects Oracle Fusion Middleware version 8.3.5.0.

How can I mitigate CVE-2011-0794?

Mitigation for CVE-2011-0794 generally involves applying the latest patches or updates from Oracle.

Is CVE-2011-0794 a remote or local vulnerability?

CVE-2011-0794 is classified as a local vulnerability, requiring local user access to exploit.

When was CVE-2011-0794 disclosed?

CVE-2011-0794 was disclosed in April 2011 as part of Oracle's Critical Patch Update.