Vulnerability Description
SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note 2441560.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Sapcar | 721.510 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/98350Third Party AdvisoryVDB Entry
- https://www.coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vuExploitThird Party Advisory
- https://www.exploit-db.com/exploits/41991/
- http://www.securityfocus.com/bid/98350Third Party AdvisoryVDB Entry
- https://www.coresecurity.com/advisories/sap-sapcar-heap-based-buffer-overflow-vuExploitThird Party Advisory
- https://www.exploit-db.com/exploits/41991/
FAQ
What is CVE-2017-8852?
CVE-2017-8852 is a vulnerability with a CVSS score of 7.8 (HIGH). SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of dat...
How severe is CVE-2017-8852?
CVE-2017-8852 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-8852?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Sapcar.