PT-2017-18582 · Sap · Sapcar

Alberto Solino + 2 · Publicado 2017-05-10 · Atualizado 2017-08-16 · CVE-2017-8852

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP SAPCAR version 721.510

Description The issue is a Heap Based Buffer Overflow that can be exploited with a crafted CAR archive file from an untrusted remote source. The problem arises because the length of data written is determined by an arbitrary number found within the file.

Recommendations For SAP SAPCAR version 721.510, apply the fix as described in SAP Security Note 2441560.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-8852

Produtos afetados

Sapcar

Referências · 5

• 🔥 https://exploit-db.com/exploits/41991 · Exploit
• 🔥 https://coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vulnerability · Exploit
• http://securityfocus.com/bid/98350 · Nota
• https://osv.dev/vulnerability/CVE-2017-8852 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8852 · Nota de Segurança