CVE-2006-0272: Oracle ORACLE10G

High severity, CVSS 9.0. EPSS: 5.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS.

Affected products

• Oracle ORACLE10G: version enterprise_10.1.0.4 only; version personal_10.1.0.4 only; version standard_10.1.0.4 only
• Oracle ORACLE9I: version standard_9.2.0.7 only

Published 2006-01-18. Last modified 2026-06-16.