#VU10605 Memory corruption in SAP Internet Graphics Server - CVE-2018-2386
Published: February 16, 2018 / Updated: February 16, 2018
Vulnerability identifier: #VU10605
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2018-2386
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
SAP Internet Graphics Server
SAP Internet Graphics Server
Software vendor:
SAP
SAP
Description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to an out-of-bounds buffer overflow. A remote attacker can send an overly long argument, overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.