Oracle Data Quality Trillium Based Set Basic Preview Data Type Remote Code Execution Vulnerability (CVE-2015-4759)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  Advisory Date: JUN 16, 2016

---

  DESCRIPTION

Oracle Data Quality LoaderWizard ActiveX control is prone to a type confusion vulnerability. A successful exploitation could lead to remote code execution in the context of client running the application.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1007296