VULNERABILITY INTELLIGENCE

CVE-2007-4467

CVSS score9.3 HIGH
EPSS probability21.07%
CISA KEVNot currently listed
Published2007-08-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters." NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references