CVE-2007-4475

Опубликовано: 01 апр. 2009

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.

Ссылки

http://secunia.com/advisories/34559
http://www.kb.cert.org/vuls/id/985449
Patch
US Government Resource
http://www.securityfocus.com/bid/34310
http://www.vupen.com/english/advisories/2009/0892
https://exchange.xforce.ibmcloud.com/vulnerabilities/49543
https://service.sap.com/sap/support/notes/1153794
Patch
Vendor Advisory
http://secunia.com/advisories/34559
http://www.kb.cert.org/vuls/id/985449
Patch
US Government Resource
http://www.securityfocus.com/bid/34310
http://www.vupen.com/english/advisories/2009/0892
https://exchange.xforce.ibmcloud.com/vulnerabilities/49543
https://service.sap.com/sap/support/notes/1153794
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:sapgui:*:*:*:*:*:*:*:*

Версия до 7.10 (включая)

cpe:2.3:a:sap:sapgui:4.6:*:*:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6:*:windows:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6a:*:*:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6a:*:windows:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6b:*:*:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6b:*:windows:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6c:*:*:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6c:*:windows:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6d:*:*:*:*:*:*:*

cpe:2.3:a:sap:sapgui:4.6d:*:windows:*:*:*:*:*

cpe:2.3:a:sap:sapgui:6.40:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.68002

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-82mh-7w4c-7wxg

github

почти 4 года назад