CVE-2008-0307 Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
HighCVSS 9.3
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap maxdb | = 7.6.0.37 | No fix listed |
References
- 20080310 SAP MaxDB Signedness Error Heap Corruption Vulnerability third-party-advisory
- 29312 third-party-advisory vendor-advisory
- 28183 vdb-entry
- 1019571 vdb-entry
- ADV-2008-0844 vdb-entry
- maxdb-vserver-code-execution(41107) vdb-entry