PT-2008-5635 · Sap+1 · Sap Sapgui+1

Will Dormann · Published 2008-11-10 · Updated 2017-08-08 · CVE-2008-4387

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SAP SAPgui (affected versions not specified)

Description: The issue concerns an unspecified vulnerability in the Simba MDrmSap ActiveX control within the mdrmsap.dll component of SAP SAPgui. This vulnerability potentially allows remote attackers to execute arbitrary code through unknown vectors, specifically when the control is instantiated by Internet Explorer.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-4387

Affected Products

Internet Explorer

Sap Sapgui

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-4387 · Security Note
• http://osvdb.org/49721 · Note
• http://vupen.com/english/advisories/2008/3106 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46440 · Note
• http://kb.cert.org/vuls/id/277313 · Note
• http://securityfocus.com/bid/32186 · Note