PT-2011-3724 · Corel+1 · Coreldraw+1

Will Dormann · Published 2011-07-21 · Updated 2014-01-14 · CVE-2011-2264

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.3.2.0 through 8.3.5.0

Description The issue affects confidentiality, integrity, and availability. It is related to the Outside In Filters in the Oracle Outside In Technology component. The exact vectors of the issue are unknown. There are claims from a reliable third party that this could be a stack-based buffer overflow in the imcdr2.flt library for the CorelDRAW parser.

Recommendations For versions 8.3.2.0 through 8.3.5.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2011-2264

Affected Products

Coreldraw

Oracle Fusion Middleware

References · 6

• http://oracle.com/technetwork/topics/security/cpujuly2011-313328.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2264 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2264 · Note
• http://us-cert.gov/cas/techalerts/TA11-201A.html · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21660640 · Note
• http://kb.cert.org/vuls/id/103425 · Note