VULNERABILITY INTELLIGENCE
CVE-2004-1363
CVSS score9.8 CRITICAL
EPSS probability9.10%
CISA KEVNot currently listed
Published2004-08-04
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Weakness classification
- CWE-131: Incorrect Calculation of Buffer Size
Primary references
- cve@mitre.org — Mailing List
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org — Broken Link, Patch, Vendor Advisory
- cve@mitre.org — Broken Link, Patch, Vendor Advisory
- cve@mitre.org — Broken Link, Patch, Third Party Advisory, VDB Entry
- cve@mitre.org — Broken Link, Patch, Third Party Advisory, US Government Resource
- cve@mitre.org — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Vendor Advisory