CVE-2013-5791 Memory corruption in n/a

What is CVE-2013-5791?

CVE-2013-5791 is a low-severity memory corruption vulnerability in Oracle Fusion Middleware, published on 16 Oct 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to execute arbitrary code via a long field (aka column) name.

Which versions are affected by CVE-2013-5791?

It affects 1 product.

Products include Oracle Fusion Middleware.

How do I fix CVE-2013-5791?

No fix has been published for CVE-2013-5791 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2013-5791 being exploited?

There is no known exploitation of CVE-2013-5791 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Oracle Fusion Middleware

• CVE-2012-1710 Oracle Fusion Middleware Unspecified Exploited Critical 9.8
• CVE-2012-3152 Oracle Fusion Middleware Unspecified Exploited Critical 9.1
• CVE-2012-0518 Oracle Fusion Middleware Unspecified Exploited Medium 4.7
• CVE-2013-2380 Other in n/a Critical 10.0
• CVE-2012-3135 Other in n/a Critical 10.0

All Oracle Fusion Middleware vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-p93r-68pq-483j.