Memory corruption in SAP Internet Graphics Server - CVE-2018-2386
Published: February 16, 2018 / Updated: February 16, 2018
Vulnerability identifier: #VU10605
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-2386
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to an out-of-bounds buffer overflow. A remote attacker can send an overly long argument, overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
SAP Internet Graphics Server
How to mitigate CVE-2018-2386
Install update from vendor's website.