Vulnerability Details : CVE-2015-6013
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows local users to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2015-4808, CVE-2015-6014, CVE-2015-6015, and CVE-2016-0432. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this issue is a stack-based buffer overflow in Oracle Outside In 8.5.2 and earlier, which allows remote attackers to execute arbitrary code via a crafted WK4 file.
Vulnerability category: OverflowExecute code
Products affected by CVE-2015-6013
- cpe:2.3:a:oracle:outside_in_technology:8.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:outside_in_technology:8.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:outside_in_technology:8.5.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-6013
1.35%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 86 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-6013
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2015-6013
-
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Oracle Critical Patch Update - January 2016Vendor Advisory
-
https://www.kb.cert.org/vuls/id/916896
VU#916896 - Oracle Outside In 8.5.2 contains multiple stack buffer overflowsThird Party Advisory;US Government Resource
-
http://www.securityfocus.com/bid/81227
Oracle Fusion Middleware CVE-2015-6013 Local Security Vulnerability
-
http://www.securitytracker.com/id/1034711
Oracle Fusion Middleware Bugs Let Remote Users Access and Modify Data and Remote and Local Users Deny Service - SecurityTracker
Jump to