PT-2017-18582

CVE-2017-8852

Published

2017-05-10

Updated

2017-08-16

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP SAPCAR version 721.510

Description The issue is a Heap Based Buffer Overflow that can be exploited with a crafted CAR archive file from an untrusted remote source. The problem arises because the length of data written is determined by an arbitrary number found within the file.

Recommendations For SAP SAPCAR version 721.510, apply the fix as described in SAP Security Note 2441560.

Exploitability

Exploit

Fix

Impacts

Researchers

Alberto Solino

Martin Gallo

Maximiliano Vidal

Vendors

Affected products

Weakness enumeration