US-CERT warns of SAP vulnerability

The U.S. Computer Emergency Readiness Team has warned of a vulnerability in SAP GUI, the graphical user interface client in SAP's enterprise resource planning software.

The unspecified flaw can cause Internet Explorer (IE) to crash in an exploitable manner. The flaw lies in an ActiveX control called MDrmSap, a component of SAP GUI.

The U.S. Computer Emergency Readiness Team (U.S.-CERT) warned in an SAP Note 1142431. Login is required to access the patch.

Workarounds include disabling the MDrmSap ActiveX control in IE by setting the IE killbit for CLSID {B01952B0-AF66-11D1-B10D-0060086F6D97}, or IT professionals could disable IE ActiveX controls completely.

Security company Secunia warned in an advisory that the flaw was "highly critical". Versions of SAP GUI affected are 6.x and 7.x, according to Secunia.

Talkback 0 comments

• Senior Security Engineer
• Project Manager WebSphere SOA knowledge REQUIRED
• BCPDR Coordinator for one Leading ITSecurity Client based In Delhi/HYD/Chennai.
• Fraud, Risk and Compliance Officer Japanese location
• Senior Mechanical HVAC Engineer. $125105K. LongTerm Security

TechGuides

Employ smoke tests at the start of your testing process

The most basic tests any software developer must run are smoke tests, which are a set of written, non-exhaustive tests that only deal with the most functional aspects of a software application or process.

Read more »

Latest from Blog Central

What will social analytics say about your company?

Read more »

Cutting-edge technology from premium sponsors

Brought to you by:

More Tech Showcases:

Cisco Collaboration

Salesforce CRM

NetIQ Active Directory