PT-2017-18582 · Sap · Sapcar

Alberto Solino + 2 · Published 2017-05-10 · Updated 2017-08-16 · CVE-2017-8852

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP SAPCAR version 721.510

Description The issue is a Heap Based Buffer Overflow that can be exploited with a crafted CAR archive file from an untrusted remote source. The problem arises because the length of data written is determined by an arbitrary number found within the file.

Recommendations For SAP SAPCAR version 721.510, apply the fix as described in SAP Security Note 2441560.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-8852

Affected Products

Sapcar

References · 5

• 🔥 https://exploit-db.com/exploits/41991 · Exploit
• 🔥 https://coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vulnerability · Exploit
• https://osv.dev/vulnerability/CVE-2017-8852 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8852 · Security Note
• http://securityfocus.com/bid/98350 · Note