The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
https://exchange.xforce.ibmcloud.com/vulnerabilities/18664
http://www.us-cert.gov/cas/techalerts/TA04-245A.html
http://www.securityfocus.com/bid/10871
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
http://www.ngssoftware.com/advisories/oracle23122004F.txt
http://www.kb.cert.org/vuls/id/316206
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1