PT-2008-5635 · Sap+1 · Sap Sapgui+1

Will Dormann · Publicado 2008-11-10 · Atualizado 2017-08-08 · CVE-2008-4387

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SAP SAPgui (affected versions not specified)

Description: The issue concerns an unspecified vulnerability in the Simba MDrmSap ActiveX control within the mdrmsap.dll component of SAP SAPgui. This vulnerability potentially allows remote attackers to execute arbitrary code through unknown vectors, specifically when the control is instantiated by Internet Explorer.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-4387

Produtos afetados

Internet Explorer

Sap Sapgui

Referências · 6

• http://osvdb.org/49721 · Nota
• http://vupen.com/english/advisories/2008/3106 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46440 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4387 · Nota de Segurança
• http://kb.cert.org/vuls/id/277313 · Nota
• http://securityfocus.com/bid/32186 · Nota