HTTP: SAP GUI Sapirrfc.dll Unsafe ActiveX Method
This signature detects attempts to exploit a known vulnerability in the ActiveX component provided with the SAP GUI. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client browser. Note: Victim interaction is required by either visiting a malicious Web site or clicking on a link.
Extended Description
SAP AG SAPgui is prone to a remote buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of an application that uses the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition. SAPgui 6.4 is vulnerable; other versions may also be affected.
Affected Products
Sap ag_sapgui
Short Name
HTTP:STC:ACTIVEX:SAP-IRRFC-OF
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
ActiveX GUI Method SAP Sapirrfc.dll Unsafe bid:35256
Release Date
06/09/2009
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Sap