CVE-2011-5167 Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote...
HighCVSS 9.3
EPSS 9.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle hyperion strategic finance | <= 12.0 | No fix listed |
| oracle hyperion strategic finance | = 11.1.2.1.0 | No fix listed |
| tidestone formula one activex control | = 6.3.5.1 | No fix listed |
References
- retrogod.altervista.org exploit
- 46764 third-party-advisory vendor-advisory
- 18092 exploit
- 76913 vdb-entry
- www.saintcorporation.com
- 50565 vdb-entry
- oracle-hyperion-activex-bo(71163) vdb-entry