Short Name |
HTTP:STC:ACTIVEX:SAP-IRRFC-OF |
---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
SAP GUI Sapirrfc.dll Unsafe ActiveX Method |
Release Date |
2009/06/09 |
Update Number |
1449 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects attempts to exploit a known vulnerability in the ActiveX component provided with the SAP GUI. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client browser. Note: Victim interaction is required by either visiting a malicious Web site or clicking on a link.
SAP AG SAPgui is prone to a remote buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of an application that uses the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition. SAPgui 6.4 is vulnerable; other versions may also be affected.