SAP GUI Remote Buffer Overflow Vulnerability
BID:75169
Info
SAP GUI Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 75169 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2015 12:00AM |
| Updated: | Jun 11 2015 12:00AM |
| Credit: | Darya Maenkova (ERPScan) |
| Vulnerable: |
SAP Gui 0 |
| Not Vulnerable: | |
Discussion
SAP GUI Remote Buffer Overflow Vulnerability
SAP GUI is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition.
SAP GUI is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition.
Exploit / POC
SAP GUI Remote Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SAP GUI Remote Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.