CVE-2011-2264

Name: CVE-2011-2264
Creator: NVD / NIST
Published: 2011-07-21T00:55:01.003+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 31.11%

Last modified Jun 16, 2026

CVE-2011-2264 is a vulnerability of currently unknown severity. Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the July 2011 CPU. EPSS estimates a 31.11% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the July 2011 CPU. Oracle has not commented on claims from a reliable third party that this is a stack-based buffer overflow in the imcdr2.flt library for the CorelDRAW parser.

Metrics

EPSS Probability

31.11%

98.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Oracle	Fusion Middleware	8.3.2.0
Oracle	Fusion Middleware	8.3.5.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg21660640
http://www.kb.cert.org/vuls/id/103425US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlPatch, Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA11-201A.htmlUS Government Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21660640
http://www.kb.cert.org/vuls/id/103425US Government Resource
http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.htmlPatch, Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA11-201A.htmlUS Government Resource

Timeline

Published: Jul 21, 2011
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2011-2264?

How severe is CVE-2011-2264?

Severity scoring for CVE-2011-2264 is pending analysis. The EPSS model estimates a 31.11% probability of exploitation in the next 30 days.

How do I fix CVE-2011-2264?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-2264?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST