Potential remote termination of running processes in Adobe Document Services, SAP security note 2218411

SAP security note 2218411, "Potential remote termination of running processes in Adobe Document Services", is a program error note released on 15.07.2016. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

An attacker can remotely exploit SAP functions of Adobe Document Services so that they can terminate it manually.

Solution

Please apply the ADS patches mentioned in this SAP Note.

Reason and prerequisites

The issue is caused by a memory corruption that causes the process to terminate. An attacker can provoke a condition in which the process attempts to read outside its memory space, causing a memory protection fault. As a result, the system terminates the process, rendering the application unusable until it is restarted manually.

References

Affected components

• BC-SRV-FP: Basis Services/Communication Interfaces > Forms Processing