CVE-2016-3979

High

Published: 08/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Internet Communication Manager (ICM) in SAP JAVA AS versions 7.2 to 7.4 allows remote attackers to cause a denial of service through heap memory corruption and process crash via a crafted HTTP request, related to the IctParseCookies function.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operations, potentially leading to service outages and loss of application availability.

Recommendation

It is recommended to upgrade to the latest version of SAP JAVA AS to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in SAP JAVA AS 7.2 to 7.4

CVE-2016-3980High
The Java Startup Framework (jstart) in SAP JAVA AS versions 7.2 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted HTTP request.

Original NVD description (English source)

Internet Communication Manager (aka ICMAN or ICM) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service (heap memory corruption and process crash) via a crafted HTTP request, related to the IctParseCookies function, aka SAP Security Note 2256185.