CVE:CVE-2012-3133
CNNVD:CNNVD-201212-321
Oracle DataDirect是一款高性能商业的数据访问组件。
使用在Oracle Hyperion Interactive Reporting 11.1.2.1和11.1.2.2版本、Essbase Server 11.1.2.1和11.1.2.2、Production Reporting Server 11.1.2.1和11.1.2.2版本以及Integration Services Server 11.1.2.1和11.1.2.2版本中的DataDirect ODBC驱动程序中存在缓冲区溢出漏洞。攻击者利用该漏洞产生未知影响和攻击向量。
solution:Upgrade oracle hyperion_interactive_reporting to a higher version than 11.1.2.1,11.1.2.2,and avoid the version 11.1.2.1,11.1.2.2; Upgrade oracle essbase_server to a higher version than 11.1.2.1,11.1.2.2,and avoid the version 11.1.2.1,11.1.2.2; Upgrade oracle hyperion_production_reporting_server to a higher version than 11.1.2.1,11.1.2.2,and avoid the version 11.1.2.1,11.1.2.2; Upgrade oracle integration_services_server to a higher version than 11.1.2.1,11.1.2.2,and avoid the version 11.1.2.1,11.1.2.2