CVE-2007-1917 Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This inform...
HighCVSS 10.0
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap rfc library | = 6.4 | No fix listed |
| sap rfc library | = 7.0 | No fix listed |
References
- 24722 third-party-advisory vendor-advisory
- 2536 third-party-advisory
- www.cybsec.com
- 20070404 CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow mailing-list
- 23307 vdb-entry
- ADV-2007-1270 vdb-entry
- sap-rfc-createinstance-bo(33416) vdb-entry