CVE-2011-5167: Oracle Hyperion Strategic Finance

High severity, CVSS 9.3. EPSS: 9.8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter.

Affected products

• Oracle Hyperion Strategic Finance: up to and including 12.0; version 11.1.2.1.0 only
• Tidestone Formula One Activex Control: version 6.3.5.1 only

Published 2012-09-15. Last modified 2026-06-16.