CVE-2009-3737

CVE-2009-3737 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document.

Learn more about our Web Application Penetration Testing UK.