CVE-2010-4556 Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadThe...
HighCVSS 9.3
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver business client | All versions | No fix listed |
References
- 35796 third-party-advisory vendor-advisory
- 45396 vdb-entry
- 1024890 vdb-entry
- ADV-2010-3239 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- netweaver-activex-bo(64061) vdb-entry
- service.sap.com