CVE-2004-1774

Oracle Database 10.1 - MDSYS.MD2.SDO_CODE_SIZE Buffer Overflow

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2004-1774 has a selected CVSS score of 7.2; EIP currently links 1 catalogued exploit.

Description

Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBOracle Database 10.1 - MDSYS.MD2.SDO_CODE_SIZE Buffer OverflowExploitDB exploitby Esteban Martinez FayoNot analyzed1 file
ExploitDB
PoC details

References

8