ID CVE-2012-3217
Summary Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability, related to Outside In HTML Export SDK. Per: http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html "Outside In Technology is a suite of software development kits (SDKs). It does not have any particular associated protocol. If the hosting software passes data received over the network to Outside In Technology code, the CVSS score would increase to 6.8."
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:fusion_middleware:8.3.7.0:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 12-10-2018 - 22:03)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:P
msbulletin via4
bulletin_id MS13-013
bulletin_url
date 2013-02-12T00:00:00
impact Remote Code Execution
knowledgebase_id 2784242
knowledgebase_url
severity Important
title Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution
oval via4
  • accepted 2013-01-21T04:00:19.244-05:00
    class vulnerability
    contributors
    name SecPod Team
    organization SecPod Technologies
    definition_extensions
    • comment Microsoft Exchange Server 2007 SP3 is installed
      oval oval:org.mitre.oval:def:15784
    • comment Microsoft Exchange Server 2010 SP1 is installed
      oval oval:org.mitre.oval:def:15339
    • comment Microsoft Exchange Server 2010 SP2 is installed
      oval oval:org.mitre.oval:def:14151
    description Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability, related to Outside In HTML Export SDK.
    family windows
    id oval:org.mitre.oval:def:15911
    status accepted
    submitted 2012-12-12T08:43:01
    title Oracle Outside In Contains Multiple Exploitable Vulnerabilities-II MS12-080
    version 4
  • accepted 2013-03-25T04:00:11.232-04:00
    class vulnerability
    contributors
    name SecPod Team
    organization SecPod Technologies
    definition_extensions
    comment Microsoft FAST Search Server 2010 for SharePoint is installed
    oval oval:org.mitre.oval:def:15918
    description Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability, related to Outside In HTML Export SDK.
    family windows
    id oval:org.mitre.oval:def:16080
    status accepted
    submitted 2013-02-15T14:21:01
    title Oracle Outside In Contains Multiple Exploitable Vulnerability - CVE-2012-3217 (MS13-013)
    version 4
refmap via4
cert
  • TA12-346A
  • TA13-043B
confirm
mandriva MDVSA-2013:150
osvdb 86392
Last major update 12-10-2018 - 22:03
Published 17-10-2012 - 10:54
Last modified 12-10-2018 - 22:03
Back to Top