CVE-2011-5154 Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the cur...
MediumCVSS 6.9
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap graphical user interface | = 6.4 | No fix listed |
| sap graphical user interface | = 7.2 | No fix listed |
References
- dsecrg.com
- 43707 third-party-advisory vendor-advisory
- www.sdn.sap.com
- service.sap.com