|CVSS SCORE||9.7, (AV:N/AC:L/Au:N/C:C/I:C/A:P)|
The flaw exists within the sccfut.dll component which is used by multiple vendors, most notably the Novell Groupwise E-Mail Client. When opening the OOXML formatted mail attachment for preview the process copies the target of a Relationship tag to a local stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of SYSTEM.
Oracle has issued an update to correct this vulnerability. More details can be found at: