• info
• discussion
• exploit
• solution
• references

Oracle Database Server TO_TIMESTAMP_TZ Buffer Overflow Vulnerability

Oracle Database Server is prone to a buffer overflow in the TO_TIMESTAMP_TZ function. Malicious users who can execute this function with malformed parameters or influence a query which causes this function to be executed may exploit this vulnerability. Successful exploitation will enable the attacker to execute malicious instructions in the context of the database server.