| Package | Affected versions | Patched versions |
|---|---|---|
| application server | = 10.1.0.2 | |
| oracle10g | = enterprise_10.1.0.2= personal_10.1.0.2= standard_10.1.0.2 |
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free