PT-2017-18582

CVE-2017-8852

Publicado

2017-05-10

Atualizado

2017-08-16

Descrição por

CVSS 3.1

7.8

Alta

MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP SAPCAR version 721.510

Description The issue is a Heap Based Buffer Overflow that can be exploited with a crafted CAR archive file from an untrusted remote source. The problem arises because the length of data written is determined by an arbitrary number found within the file.

Recommendations For SAP SAPCAR version 721.510, apply the fix as described in SAP Security Note 2441560.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Alberto Solino

Martin Gallo

Maximiliano Vidal

Fornecedores

Produtos afetados

Enumeração de fraquezas