CVE-2017-8852

Summary : CVE-2017-8852 affects SAP SAPCAR 721.510. A heap-based buffer overflow occurs in the SAPCAR archive parser when processing specially crafted CAR archives, potentially enabling local code execution. The vulnerability arises from copying a length field derived from data in the archive int...

CVE-2017-8852

SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file received from an untrusted remote source. The problem is that the length of data written is an arbitrary number found within the file. The vendor response is SAP Security Note...