← Database

CVE-2003-1208

CRITICAL CVSS: 10.0 Published: 2004-12-03 Modified: 2026-06-16

Description

Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.

Affected Platforms

Oracle Oracle9I

Weakness Type

NVD-CWE-Other

References