NVD Vulnerability Detail

CVE-2010-3591

Summary	Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can overwrite or delete arbitrary files via a full pathname in the second argument to the DownloadSingleMessageToFile method in the EMPOP3Lib ActiveX component (empop3.dll).
Publication Date	Jan. 20, 2011, 1 a.m.
Registration Date	Jan. 29, 2021, 11:06 a.m.
Last Update	Nov. 21, 2024, 10:19 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:oracle:fusion_middleware:10.1.3.5:::::::*
cpe:2.3:a:oracle:fusion_middleware:10.1.3.4:::::::*

Related information, measures and tools

No	URL	タグ
1	http://dsecrg.com/pages/vul/show.php?id=305
2	http://dsecrg.com/pages/vul/show.php?id=305
3	http://secunia.com/advisories/42976
4	http://secunia.com/advisories/42976
5	http://www.exploit-db.com/exploits/16055
6	http://www.exploit-db.com/exploits/16055
7	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html	Vendor Advisory
8	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html	Vendor Advisory
9	http://www.securityfocus.com/archive/1/515959/100/0/threaded
10	http://www.securityfocus.com/archive/1/515959/100/0/threaded
11	http://www.securityfocus.com/bid/45851
12	http://www.securityfocus.com/bid/45851
13	http://www.securitytracker.com/id?1024981
14	http://www.securitytracker.com/id?1024981
15	http://www.vupen.com/english/advisories/2011/0143	Vendor Advisory
16	http://www.vupen.com/english/advisories/2011/0143	Vendor Advisory
17	https://exchange.xforce.ibmcloud.com/vulnerabilities/64768
18	https://exchange.xforce.ibmcloud.com/vulnerabilities/64768

Common Vulnerabilities List

JVN Vulnerability Information

Oracle Fusion Middleware の Oracle Document Capture コンポーネントにおける脆弱性

Title	Oracle Fusion Middleware の Oracle Document Capture コンポーネントにおける脆弱性
Summary	Oracle Fusion Middleware の Oracle Document Capture コンポーネントには、Internal Operations に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。
Possible impacts	第三者により、情報が漏えいする、あるいは情報を改ざんされたり、サービス運用妨害 (DoS) 攻撃が行われる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 18, 2011, midnight
Registration Date	Feb. 10, 2011, 11:49 a.m.
Last Update	Sept. 22, 2022, 2:16 p.m.

Affected System

オラクル

Oracle Fusion Middleware 10.1.3.4

Oracle Fusion Middleware 10.1.3.5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-3591	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3591
National Vulnerability Database (NVD)
2	CVE-2010-3591	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-3591

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
Critical Patch Updates and Security Alerts
1	cpujan2011-194091	http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-22-263-01	https://www.cisa.gov/uscert/ics/advisories/icsa-22-263-01
ISS X-Force Database
2	64768	http://xforce.iss.net/xforce/xfdb/64768
JVN
3	JVNVU#90193571	http://jvn.jp/vu/JVNVU90193571/index.html
Secunia Advisory
4	SA42976	http://secunia.com/advisories/42976
SecurityFocus
5	45851	http://www.securityfocus.com/bid/45851
SecurityTracker
6	1024981	http://www.securitytracker.com/id?1024981
VUPEN Security
7	VUPEN/ADV-2011-0143	http://www.vupen.com/english/advisories/2011/0143

Change Log

No	Changed Details	Date of change
0	[2011年02月10日] 掲載	Sept. 22, 2022, 12:29 p.m.
1	[2022年09月22日] 参考情報：JVN (JVNVU#90193571) を追加参考情報：ICS-CERT ADVISORY (ICSA-22-263-01) を追加	Sept. 22, 2022, 2:16 p.m.