VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2244

CVE-2004-2244

Description

The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.2 and 1.0.2.2.2, and Database Server Release 2 9.2.0.1 and later, allows remote attackers to cause a denial of service (CPU and memory consumption) via a SOAP message containing a crafted DTD.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Oracle Corporation/Application Server5 versions
    cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*
    • (no CPE)range: 9.0.2.3 and earlier, 9.0.3.0, 9.0.3.1, 1.0.2.2, 1.0.2.2.2
  • Oracle Corporation/Oracle9i9 versions
    cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*
  • Oracle Corporation/Database Serverllm-fuzzy
    Range: >=9.2.0.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.