CVE-2014-2262: Buffer Overflow
Published Feb 28, 2014
·Updated
Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program.
Affected Software
4 affected components
SAS Base SAS=9.2-ts2m
SAS Base SAS=9.3-ts1m1
SAS Base SAS=9.3-ts1m2
SAS Base SAS=9.4-ts1m0
Event History
Feb 28, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Mar 1, 2014
Data Sourced
via NVD·12:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2262?
CVE-2014-2262 is categorized with a CVSS score indicating a high severity due to its potential for remote code execution.
2
How do I fix CVE-2014-2262?
To mitigate CVE-2014-2262, you should upgrade to a patched version of SAS Base that addresses this buffer overflow vulnerability.
3
What types of attacks can CVE-2014-2262 lead to?
CVE-2014-2262 can enable user-assisted remote attackers to execute arbitrary code on affected systems.
4
Which versions of SAS are vulnerable to CVE-2014-2262?
CVE-2014-2262 affects SAS Base versions 9.2 TS2M3, 9.3 TS1M1, 9.3 TS1M2, and 9.4 TS1M0.
5
Is user interaction required for CVE-2014-2262 to be exploited?
Yes, CVE-2014-2262 requires user interaction to execute the crafted SAS program that triggers the vulnerability.