9.3
CVSSv2

CVE-2009-3737

Published: 17/08/2010 Updated: 26/07/2011
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote malicious users to execute arbitrary code via a crafted HTML document.

Vulnerable Product Search on Vulmon Subscribe to Product

oracle siebel option pack ie activex control