← Database

CVE-2004-1774

HIGH CVSS: 7.2 Published: 2004-08-31 Modified: 2026-06-16

Description

Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.

Affected Platforms

Oracle Oracle10GOracle Application Server

Weakness Type

NVD-CWE-Other

References