CVE-2006-0288

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP01 and (2) REP02.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/18493Vendor Advisory
http://secunia.com/advisories/18608Patch, Vendor Advisory
http://securitytracker.com/id?1015499Patch
http://www.kb.cert.org/vuls/id/545804Third Party Advisory, US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
http://www.securityfocus.com/bid/16287Exploit
http://www.vupen.com/english/advisories/2006/0243Vendor Advisory
http://www.vupen.com/english/advisories/2006/0323Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
http://secunia.com/advisories/18493Vendor Advisory
http://secunia.com/advisories/18608Patch, Vendor Advisory
http://securitytracker.com/id?1015499Patch
http://www.kb.cert.org/vuls/id/545804Third Party Advisory, US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
http://www.securityfocus.com/bid/16287Exploit
http://www.vupen.com/english/advisories/2006/0243Vendor Advisory
http://www.vupen.com/english/advisories/2006/0323Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321

Timeline

Published: Jan 18, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-028910.0Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecif CVE-2006-029010.0Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version CVE-2006-029110.0Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Releas CVE-2006-02927.5The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attac CVE-2006-02937.5The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) an CVE-2006-02947.5Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute ar CVE-2006-02955.1Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbi CVE-2006-02965.0The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which al CVE-2006-02975.1Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow re CVE-2006-02985.8The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and p CVE-2006-02996.4The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes th CVE-2006-03005.1Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application crash) and possibly exe