CVE-2012-4341 Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value,...
HighCVSS 10.0
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package with opcode 0x43 and sub opcode 0x4 to TCP port 3900.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver abap | = 7.0 | No fix listed |
| sap netweaver abap | = 7.02-sp6 | No fix listed |
| sap netweaver abap | = 7.03-sp4 | No fix listed |
References
- scn.sap.com
- 49744 third-party-advisory vendor-advisory
- 1027211 vdb-entry
- www.zerodayinitiative.com
- www.zerodayinitiative.com
- www.zerodayinitiative.com
- service.sap.com
- websmp230.sap-ag.de