CVE-2007-3605 Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to...
HighCVSS 7.6
EPSS 69.9%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap enjoysap | All versions | No fix listed |
References
- 37690 vdb-entry
- 25959 third-party-advisory
- 2873 third-party-advisory
- www.ngssoftware.com
- 20070705 EnjoySAP, SAP GUI for Windows - Stack Overflow mailing-list
- 24772 exploit patch vdb-entry
- 24776 vdb-entry
- ADV-2007-2449 vdb-entry
- enjoysap-kweditcontrolkwedit1-bo(35267) vdb-entry
- 4148 exploit