Buffer Overflow in Oracle 10g MD2 Package
CVE-2004-1774
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 31 August 2004
Badges
What is CVE-2004-1774?
A buffer overflow vulnerability exists in the SDO_CODE_SIZE procedure of the MD2 package in Oracle 10g. This flaw allows local users to potentially execute arbitrary code by exploiting a long LAYER parameter. Users are advised to upgrade to at least version 10.1.0.2 Patch 2 to mitigate the risk posed by this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
EPSS Score
7% chance of being exploited in the next 30 days.
Timeline
Vulnerability Reserved
- ๐ก
Public PoC available
- ๐พ
Exploit known to exist
Vulnerability published