Signature Detail
Short Name |
HTTP:STC:ACTIVEX:SAP-IRRFC-OF |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
sap gui |
Release Date |
2009/06/09 |
Update Number |
1449 |
Supported Platforms |
idp-4.0.110090709+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: SAP GUI Sapirrfc.dll Unsafe ActiveX Method
This signature detects attempts to exploit a known vulnerability in the ActiveX component provided with the SAP GUI. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client browser. Note: Victim interaction is required by either visiting a malicious Web site or clicking on a link.
Extended Description
SAP AG SAPgui is prone to a remote buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of an application that uses the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition. SAPgui 6.4 is vulnerable; other versions may also be affected.
Affected Products
- SAP AG SAPgui 6.4
References
- BugTraq: 35256
- URL: http://seclists.org/bugtraq/2009/Jun/0076.html