Oracle JInitiator ActiveX Control Multiple Buffer Overflow Vulnerabilities

Oracle JInitiator ActiveX Control Multiple Buffer Overflow Vulnerabilities

Oracle JInitiator is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Exploiting these issues allows remote attackers to execute arbitrary code in the context of applications using the affected ActiveX control and to compromise affected computers. Failed attempts will likely result in denial-of-service conditions.

These issues affect Oracle JInitiator 1.1.8.16; other versions may also be affected.