CVE-2014-2262

Buffer overflow in the client application of Base SAS 9.2 TS2M3, SAS 9.3 TS1M1/TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote code execution via a crafted SAS program. Root cause: overflow in the client’s handling of SAS programs (no details on specific file/func). Impact: arbitrary code ex...