Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2009-3737
cve-2009-3737
oracle
siebel
option pack
ie
activex
memory initialization
vulnerability
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.6%
The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document.
Affected configurations
Node
oraclesiebel_option_pack_ie_activex_control
microsoftinternet_explorer
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:siebel_option_pack_ie_activex_control | oracle siebel option pack ie activex control | eq | * |
Related
cert
cert
cvelist
cvelist
CVE-2009-3737
2022-10-03 16:23:54
seebug
seebug
Oracle Siebel Option Pack for IE ActiveX控件内存初始化漏洞
2010-08-10 00:00:00
prion
prion
Design/Logic Flaw
2010-08-17 20:00:00
nvd
nvd
CVE-2009-3737
2010-08-17 20:00:02
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.6%
Related for CVE-2009-3737