Unrated severityNVD Advisory· Published Aug 31, 2004· Updated Jun 16, 2026
CVE-2004-1774
CVE-2004-1774
Description
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*
- Range: < 10.1.0.2 Patch 2
Patches
Vulnerability mechanics
References
7- www.frsirt.com/exploits/20050413.OracleExploit.sql.phpnvdExploit
- www.securiteam.com/securitynews/5CP010KE0W.htmlnvdExploitPatchVendor Advisory
- www.securityfocus.com/bid/13145nvdExploitVendor Advisory
- lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.htmlnvdVendor Advisory
- www.oracle.com/technology/deploy/security/pdf/2004alert68.pdfnvdVendor Advisory
- www.appsecinc.com/resources/alerts/oracle/2004-0001/nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/20078nvd
News mentions
0No linked articles in our index yet.