CVE-2003-1208: Oracle ORACLE9I

High severity, CVSS 10.0. EPSS: 13.2% chance of exploitation in the next 30 days.

Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions.

Affected products

• Oracle ORACLE9I: version enterprise_9.0.1 only; version enterprise_9.2.0 only; version enterprise_9.2.0.1 only; version enterprise_9.2.0.2 only; version personal_9.0.1 only; version personal_9.2 only; …

Published 2004-12-03. Last modified 2026-06-16.