Login Request a demo
Unscored severity · published Nov 8, 2007
CVE-2007-5897
Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service…
–
CVSS
3.7%
EPSS
No
On KEV
Description
Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515, CVE-2007-5509, or CVE-2007-5505, but there are insufficient details to be sure.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Database Server · Oracle
9.2.0.1; 9.2.0.2; 9.2.0.3; 9.2.0.4; 9.2.0.5; 9.2.0.6; +3 more · source: NVD
Affected product
DS
Database Server
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5897
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5897
osvdb.org
http://osvdb.org/40081
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpuoct2007-092913.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/482918/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26243
More from Database Server
10.0
CVE-2020-1953
Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements
9.9
CVE-2026-61211
Vulnerability in the RDBMS component of Oracle Database Server
9.9
CVE-2018-3110
A vulnerability was discovered in the Java VM component of Oracle Database Server
9.8
CVE-2019-16942
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
9.8
CVE-2018-14719
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from…