Problem Note 51701: When you run SAS® Foundation, non-allocated memory might be overwritten
 |  |  |  |  |
The potential for circumstances allowing a buffer overflow that results in a memory overwrite creating a security exposure have been identified. In some cases, this could allow code execution at the SAS user's permission level. It is recommended that you apply the hot fix to avoid any undue exposure for your SAS environment.
Click the Hot Fix tab in this note to access the hot fix for this issue for non-current releases of SAS.
Operating System and Release Information
| Product Family | Product | System | SAS Release | |
| Reported | Fixed* | |||
| SAS System | Base SAS | Windows 7 Professional 32 bit | 9.4 TS1M1 | |
| Microsoft Windows XP 64-bit Edition | ||||
| Microsoft® Windows® for x64 | 9.4 TS1M1 | |||
| OS/2 | ||||
| Microsoft Windows 8 Enterprise 32-bit | 9.4 TS1M1 | |||
| Microsoft Windows 8 Enterprise x64 | 9.4 TS1M1 | |||
| Microsoft Windows 8 Pro 32-bit | 9.4 TS1M1 | |||
| Microsoft Windows 8 Pro x64 | 9.4 TS1M1 | |||
| Microsoft Windows 8.1 Enterprise 32-bit | 9.4 TS1M1 | |||
| Microsoft Windows 8.1 Enterprise x64 | 9.4 TS1M1 | |||
| Windows 7 Professional x64 | 9.4 TS1M1 | |||
| Windows 7 Ultimate x64 | ||||
| Windows 7 Ultimate 32 bit | ||||
| Microsoft Windows Server 2003 Enterprise 64-bit Edition | ||||
| Microsoft Windows Server 2003 Datacenter 64-bit Edition | ||||
| Microsoft® Windows® for 64-Bit Itanium-based Systems | ||||
| z/OS | 9.4 TS1M1 | |||
| Microsoft Windows 8.1 Pro | 9.4 TS1M1 | |||
| Microsoft Windows 8.1 Pro 32-bit | 9.4 TS1M1 | |||
| Microsoft Windows 95/98 | ||||
| Microsoft Windows 2000 Advanced Server | ||||
| Microsoft Windows 2000 Datacenter Server | ||||
| Microsoft Windows 2000 Server | ||||
| Microsoft Windows 2000 Professional | ||||
| Microsoft Windows NT Workstation | ||||
| Microsoft Windows Server 2003 Datacenter Edition | ||||
| Microsoft Windows Server 2003 Enterprise Edition | ||||
| Microsoft Windows Server 2003 Standard Edition | ||||
| Microsoft Windows Server 2003 for x64 | ||||
| Microsoft Windows Server 2008 | 9.4 TS1M1 | |||
| Microsoft Windows Server 2008 R2 | 9.4 TS1M1 | |||
| Microsoft Windows Server 2008 for x64 | 9.4 TS1M1 | |||
| Microsoft Windows Server 2012 Datacenter | 9.4 TS1M1 | |||
| Microsoft Windows Server 2012 R2 Datacenter | 9.4 TS1M1 | |||
| Microsoft Windows Server 2012 R2 Std | 9.4 TS1M1 | |||
| Microsoft Windows Server 2012 Std | 9.4 TS1M1 | |||
| Microsoft Windows XP Professional | ||||
| Windows 7 Enterprise 32 bit | 9.4 TS1M1 | |||
| Windows 7 Enterprise x64 | 9.4 TS1M1 | |||
| Windows 7 Home Premium 32 bit | ||||
| Windows 7 Home Premium x64 | ||||
| Windows Millennium Edition (Me) | ||||
| Windows Vista | ||||
| Windows Vista for x64 | ||||
| 64-bit Enabled AIX | 9.4 TS1M1 | |||
| 64-bit Enabled HP-UX | 9.4 TS1M1 | |||
| 64-bit Enabled Solaris | 9.4 TS1M1 | |||
| ABI+ for Intel Architecture | ||||
| AIX | ||||
| HP-UX | ||||
| HP-UX IPF | 9.4 TS1M1 | |||
| IRIX | ||||
| Linux | ||||
| Linux for x64 | 9.4 TS1M1 | |||
| Linux on Itanium | ||||
| OpenVMS Alpha | ||||
| OpenVMS on HP Integrity | ||||
| Solaris | ||||
| Solaris for x64 | 9.4 TS1M1 | |||
| Tru64 UNIX | ||||
A fix for this issue for Base® SAS 9.4 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/L08.html#51701A fix for this issue for Base® SAS 9.3_M2 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/I22.html#51701A fix for this issue for Base® SAS 9.21_M3 is available at:
http://ftp.sas.com/techsup/download/hotfix/HF2/B25.html#51701A fix for this issue for Base SAS 9.3_M2 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/I22.html#51701A fix for this issue for Base SAS 9.3_M1 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/F98.html#51701| Type: | Problem Note |
| Priority: | alert |
| Date Modified: | 2014-02-11 16:56:20 |
| Date Created: | 2013-11-25 16:44:30 |