Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, and CVE-2012-3110.

The remote host is using a vulnerable version of FAST Search Server 2010 for SharePoint.  When the Advanced Filter Pack is enabled, vulnerable versions of the Oracle Outside In libraries are used to parse files.  An attacker could exploit this by uploading a malicious file to a site using FAST Search to index, which could result in arbitrary code execution.

The version of Symantec Enterprise Vault installed on the remote host uses a version of the Oracle Outside-In libraries that contains multiple vulnerabilities.  A remote attacker could send an email with a malicious attachment to be downloaded and stored in a user's mail box until processed for archiving thus potentially resulting in a denial of service in the application or allow arbitrary code execution.

The version of Novell GroupWise Internet Agent running on the remote host is 8.x less than or equal to 8.0.2 HP3, or 12.x earlier than 12.0.1.  As such, it is potentially affected by multiple vulnerabilities :

  - A heap-based buffer overflow vulnerability exists when     parsing requests to the web-based admin interface with     a specially crafted Content-Length header. 

  - Multiple vulnerabilities exist in the bundled Oracle     'Outside In' viewer technology.

By exploiting these flaws, a remote, unauthenticated attacker could execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

The version of Microsoft Exchange running on the remote host is using a vulnerable set of the Oracle Outside In libraries.  These libraries are used by the WebReady Document Viewing feature to display certain kinds of attachments viewed via Outlook Web App (OWA).  An attacker could exploit this by sending a malicious email attachment to a user who views it in OWA, resulting in arbitrary code execution as LocalService.

ID	Name	Product	Family	Severity
62462	MS12-067: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2742321)	Nessus	Windows : Microsoft Bulletins	low
62458	Symantec Enterprise Vault < 10.0.2 Multiple Vulnerabilities in Oracle Outside-In Libraries (SYM12-015)	Nessus	Windows	low
62283	Novell GroupWise Internet Agent 8.x <= 8.0.2 HP3 / 12.x < 12.0.1 Multiple Vulnerabilities	Nessus	Windows	critical
61533	MS12-058: Vulnerabilities in Microsoft Exchange Server WebReady Document Viewing Could Allow Remote Code Execution (2740358)	Nessus	Windows : Microsoft Bulletins	low

Detections

Analytics

CVE-2012-3108

high

Tenable Plugins

low

low

critical

low