SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 59418: SAS® Simulation Studio potential security risk with Java deserialization

DetailsAboutRate It

SAS Simulation Studio uses the Java XMLEncoder and XMLDecoder to save and restore SAS Simulation models. This causes a Java deserialization security risk.



Operating System and Release Information

Product FamilyProductSystemSAS Release
ReportedFixed*
SAS SystemSAS Simulation StudioMicrosoft Windows 8.1 Pro 32-bit9.4 TS1M5
Microsoft Windows 8.1 Pro x649.4 TS1M5
Microsoft Windows 109.4 TS1M5
Microsoft Windows 95/98
Microsoft Windows 8 Pro x649.4 TS1M5
Microsoft Windows 8.1 Enterprise 32-bit9.4 TS1M5
Windows Millennium Edition (Me)
Windows 7 Ultimate x649.4 TS1M5
Windows 7 Professional x649.4 TS1M5
Windows 7 Professional 32 bit9.4 TS1M5
Windows 7 Home Premium x649.4 TS1M5
Windows 7 Home Premium 32 bit9.4 TS1M5
Windows 7 Enterprise 32 bit9.4 TS1M5
Microsoft Windows Server 2012 Datacenter9.4 TS1M5
Microsoft Windows NT Workstation
Microsoft Windows 2000 Datacenter Server
Windows Vista
Microsoft® Windows® for x649.4 TS1M5
Windows Vista for x64
Windows 7 Ultimate 32 bit9.4 TS1M5
Windows 7 Enterprise x649.4 TS1M5
Microsoft Windows XP Professional
Microsoft Windows Server 2012 Std9.4 TS1M5
Microsoft Windows Server 2012 R2 Std9.4 TS1M5
Microsoft Windows Server 2012 R2 Datacenter9.4 TS1M5
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 for x64
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 for x64
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server
Microsoft Windows 8.1 Enterprise x649.4 TS1M5
Microsoft Windows 8 Pro 32-bit9.4 TS1M5
Microsoft Windows 8 Enterprise x649.4 TS1M5
Microsoft Windows 8 Enterprise 32-bit9.4 TS1M5
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.