CVE-2007-4475 Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the...
HighCVSS 9.3
EPSS 40.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sapgui | All versions | No fix listed |
| sapgui | <= 7.10 | No fix listed |
| sapgui | = 4.6 | No fix listed |
| sapgui | = 4.6a | No fix listed |
| sapgui | = 4.6b | No fix listed |
| sapgui | = 4.6c | No fix listed |
| sapgui | = 4.6d | No fix listed |
| sapgui | = 6.40 | No fix listed |
References
- 34559 third-party-advisory
- VU#985449 patch third-party-advisory us-government-resource
- 34310 vdb-entry
- ADV-2009-0892 vdb-entry
- sapgui-eaiwebviewer3D-webviewer3d-activex-bo(49543) vdb-entry
- service.sap.com patch vendor-advisory