Oracle Database Multiple Vulnerabilities

Several vulnerabilities were identified in Oracle Database. A remote or remote authenticated user can execute arbitrary code on the target system. A remote authenticated user can partially access and modify data on the target system, and cause partial denial of service conditions. A local user can obtain elevated privileges on the target system.

1. A remote user can send specially crafted data to trigger a flaw in the XML Parser component and execute arbitrary code on the target system.
2. A remote authenticated user can send specially crafted data to trigger a flaw in the Network Layer component and execute arbitrary code on the target system.
3. A local user can exploit a flaw in an Oracle executable component to gain elevated privileges.
4. A remote authenticated user can partially access and modify data and cause partial denial of service conditions on the target system. The Core RDBMS component is affected.
5. A remote authenticated user can partially modify data on the target system