Description
SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when submitted to a BIC Document application, could cause a memory corruption error. On successful exploitation, this results in the crash of the target component. Multiple submissions can make the target completely unavailable. A similarly crafted submission can be used to perform an out-of-bounds read operation as well, revealing sensitive information that is loaded in memory at that time. There is no ability to modify any information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP_SE SAP NetWeaver Application Server ABAP (BIC Document)
Default version status: unaffected
S4COREOP 104affected105affected106affected107affected108affectedSEM-BW 600affected602affected603affected604affected605affected634affected736affected746affected747affected748affected