Emergency Workaround For Oracle 0-Day

Almost Live writes "Oracle has released an out-of-cycle alert to offer mitigation for a zero-day exploit that's been posted on the Internet. The emergency workaround addresses an unpatched remote buffer overflow that's remotely exploitable without the need for a username and password, and can result in compromising the confidentiality, integrity, and availability of the targeted system." Whoever published the vulnerability and matching exploit code did not contact Oracle first.

Comments

Another victim of C/C++ lack of array safety

[Animats]

The C/C++ defect that the compiler has no idea of the size of an array claims another victim.