Team SHATTER Security Alert – Oracle Database Server provides the MDSYS.SDO_CS package that contains subprograms for working with coordinate systems. This package contains the function TRANSFORM which is vulnerable to buffer overflow attacks. Affected versions include Oracle Database Server versions 8iR3, 9iR1, 9iR2 (9.2.0.6 and previous patchsets) and 10gR1 (10.1.0.4 and previous patchsets).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/60504/oracle-mdsys.txt
Source: https://packetstormsecurity.com/files/60504/oracle-mdsys.txt.html