Back
CVE-2007-2110
Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown…
Medium4.4EPSS 0.46%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown impact and attack vectors, aka DB03. NOTE: as of 20070424, Oracle has not disputed reliable claims that DB03 occurs because RDBMS uses a NULL Discretionary Access Control List (DACL) for the Oracle process and certain shared memory sections, which allows local users to inject threads and execute arbitrary code via the OpenProcess, OpenThread, and SetThreadContext functions (DB03).
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium4.4 | AV:L/AC:M/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 0.46% · top 60% of all CVEs (5 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.4.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (11)
- [oracle-l] 20061201 Re: Oracle 9i on Windows 2003 -- Vulnerability Question (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- TA07-108A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
- http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- 23532 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 1017927 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
- SSRT061201 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
- https://www.blackhat.com/presentations/bh-dc-07/Cerrudo/Presentation/bh-dc-07-Cerrudo-ppt.pdf (opens in a new tab)x_refsource_MISCx_transferred
- http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html (opens in a new tab)x_refsource_MISCx_transferred
- http://www.ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf (opens in a new tab)x_refsource_MISCx_transferred
- ADV-2007-1426 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2007-2110)Record last updated .