CVE-2013-0418: Buffer Overflow
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0418?
The severity of CVE-2013-0418 is not explicitly stated but it allows context-dependent attackers to affect availability.
How do I fix CVE-2013-0418?
To fix CVE-2013-0418, apply the latest security updates provided by Oracle and Microsoft for affected software versions.
What software is affected by CVE-2013-0418?
CVE-2013-0418 affects Oracle Fusion Middleware versions 8.3.7 and 8.4, as well as Microsoft Exchange Server 2007 SP3 and 2010 SP2.
Are there any workarounds for CVE-2013-0418?
Currently, it is recommended to implement security best practices and restrict access to vulnerable components as a temporary measure.
What attack vectors are associated with CVE-2013-0418?
CVE-2013-0418 is associated with unspecified attack vectors related to Outside In Filters within Oracle Outside In Technology.