Описание
Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sas:base_sas:9.2:ts2m:*:*:*:*:*:*
cpe:2.3:a:sas:base_sas:9.3:ts1m1:*:*:*:*:*:*
cpe:2.3:a:sas:base_sas:9.3:ts1m2:*:*:*:*:*:*
cpe:2.3:a:sas:base_sas:9.4:ts1m0:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.08346
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
больше 3 лет назад
Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program.
EPSS
Процентиль: 92%
0.08346
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-119