CVE-2007-1916 Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is....
HighCVSS 10.0
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap rfc library | = 6.4 | No fix listed |
| sap rfc library | = 7.0 | No fix listed |
References
- 24722 third-party-advisory vendor-advisory
- 2537 third-party-advisory
- www.cybsec.com
- 20070404 CYBSEC Security Pre-Advisory: SAP RFC_START_GUI RFC Function Buffer Overflow mailing-list
- 23304 vdb-entry
- ADV-2007-1270 vdb-entry
- sap-rfc-startgui-bo(33420) vdb-entry