CVE-2011-5167

Published: Sep 15, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.

Affected (3)

Products: Oracle: Hyperion Strategic Finance · Tidestone: Formula One Activex Control

1 product

Hyperion Strategic Finance

1 product

Formula One Activex Control

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Hyperion Strategic Finance	Up to 12.0
Oracle Hyperion Strategic Finance	Version 11.1.2.1.0
Tidestone Formula One Activex Control	Version 6.3.5.1

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://retrogod.altervista.org/9sg_ttf16.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/46764

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/18092

Source: cve@mitre.org

Exploit

http://www.osvdb.org/76913

Source: cve@mitre.org

http://www.saintcorporation.com/cgi-bin/exploit_info/oracle_hyperion_financial_mgmt_activex_heap

Source: cve@mitre.org

http://www.securityfocus.com/bid/50565

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/71163

Source: cve@mitre.org

http://retrogod.altervista.org/9sg_ttf16.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/46764

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/18092

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/76913

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.saintcorporation.com/cgi-bin/exploit_info/oracle_hyperion_financial_mgmt_activex_heap

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/50565

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/71163

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.