| Package | Affected versions | Patched versions |
|---|---|---|
| hyperion strategic finance | = 11.1.2.1.0≤ 12.0 | |
| formula one activex control | = 6.3.5.1 |
Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free