Oracle OIT PDF Parser Code Execution (CVE-2017-3271)

An arbitrary write vulnerability exists in the PDF parser functionality of Oracle Outside In Technology SDK. A specially crafted PDF document can cause a parser confusion resulting in an arbitrary write vulnerability ultimately leading to code execution.

Leave a Reply