Vulnerability Details : CVE-2013-0418
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value.
Vulnerability category: Overflow
Products affected by CVE-2013-0418
- cpe:2.3:a:microsoft:exchange_server:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:fusion_middleware:8.4:*:*:*:*:*:*:*
Threat overview for CVE-2013-0418
Top countries where our scanners detected CVE-2013-0418
Top open port discovered on systems with this issue
80
IPs affected by CVE-2013-0418 1,464
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2013-0418!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2013-0418
42.48%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 97 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-0418
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
References for CVE-2013-0418
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16251
Repository / Oval Repository
-
http://archives.neohapsis.com/archives/bugtraq/2013-01/0073.html
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-012
Microsoft Security Bulletin MS13-012 - Critical | Microsoft Docs
-
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
mandriva.com
-
http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html
Oracle Critical Patch Update - January 2013Vendor Advisory
-
http://www.us-cert.gov/cas/techalerts/TA13-043B.html
Microsoft Updates for Multiple Vulnerabilities | CISAUS Government Resource
-
http://www-01.ibm.com/support/docview.wss?uid=swg21660640
Security Bulletin: Fix available for security vulnerabilities in Oracle Outside In Technology Code contained in IBM WebSphere Portal
Jump to