Team SHATTER Security Advisory - Oracle Database Server provides the CTXSYS.DRVDISP package that is part of Oracle Text component. This package contains the function TABLEFUNC_ASOWN which is vulnerable to buffer overflow attacks when it is called with a long string in their parameters.
1770f12dffe5349b52e240a1777ecd2d6c40866b8e7d13e00fc89042de1955e0