CVE-2012-0552: Critical severity oracle database vulnerability

Published May 3, 2012

Updated

Unspecified vulnerability in the Oracle Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

6 affected components

Oracle Database Server=10.2.0.3

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Oracle Database Server=11.2.0.2

Oracle Database Server=11.2.0.3

Event History

May 3, 2012

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0552?

CVE-2012-0552 has a severity rating that indicates it can affect confidentiality, integrity, and availability in affected Oracle Database Server versions.

How do I fix CVE-2012-0552?

To fix CVE-2012-0552, update to a patched version of the Oracle Database Server provided in the latest security update.

Which versions are affected by CVE-2012-0552?

CVE-2012-0552 affects Oracle Database Server versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3.

Who can exploit CVE-2012-0552?

CVE-2012-0552 can be exploited by remote authenticated users with access to the Oracle Spatial component.

What impact can CVE-2012-0552 have on my system?

CVE-2012-0552 can lead to unauthorized access affecting the confidentiality, integrity, and availability of database information.