Oracle Outside In XPM Image Processing Buffer Overflow Exploit

A stack-based buffer overflow in Oracle Outside In library used by Quick View, allows an attacker to execute arbitrary code via crafted .XPM file. This module runs a malicious web server on the Core Impact Console and waits for an unsuspecting user to trigger the exploit by connecting to it.