CVE-2010-3591

Oracle Document Capture - Actbar2.ocx Insecure Method

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2010-3591 has a selected CVSS score of 9.3; EIP currently links 2 catalogued exploits.

Description

Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can overwrite or delete arbitrary files via a full pathname in the second argument to the DownloadSingleMessageToFile method in the EMPOP3Lib ActiveX component (empop3.dll).

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBOracle Document Capture - Actbar2.ocx Insecure MethodExploitDB exploitby Evdokimov DmitriyNot analyzed1 file
ExploitDB
PoC details
ExploitDBOracle Document Capture - 'empop3.dll' Insecure MethodsExploitDB exploitby Evdokimov DmitriyNot analyzed1 file
ExploitDB
PoC details

References

10