SAP Internet Graphics Service (IGS) Remote Buffer Overflow

SAP is the largest business application and Enterprise Resource Planning (ERP) solution software provider in terms of revenue.

CYBSEC Security Systems has discovered a vulnerability in SAP IGS which when exploited can result in remote code execution with the privileges of the LocalSystem on Windows and SAP System Administrator Account on UNIX systems.

For more information about the vulnerability, read here.

SAP has already released a solution for this and customers that are affected should apply the patch as soon as possible. For more information about the patch read SAP Note 968423.