Code injection

The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

CVE-2012-2514

CVE-2012-2514 affects SAP NetWeaver Dispatcher in SAP NetWeaver 7.0 EHP1 (disp+work.exe v7010.29.15.58313) and EHP2 (v7200.70.18.23869). The vulnerability is in the DiagiEventSource function of the Dispatcher, exploitable by remotely crafted SAP Diag packets to cause a denial of service (daemon c...

PT-2012-4073

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SAP Diag packet to the DiagiEventSource function in disp+work.exe...

CVE-2012-2514: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...