Description
Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.exploit-db.com/exploits/18092 ↗
- http://www.securityfocus.com/bid/50565 ↗
- http://www.osvdb.org/76913 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71163 ↗
- http://www.saintcorporation.com/cgi-bin/exploit_info/oracle_hyperion_financial_mgmt_activex_heap ↗
- http://retrogod.altervista.org/9sg_ttf16.html ↗
- http://secunia.com/advisories/46764 ↗