CVE-2007-4475

2009-04-0118:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-4475

buffer overflow

eai webviewer3d

activex control

sapgui

remote code execution

nvd

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.95 High

EPSS

Percentile

99.3%

JSON

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.

Affected configurations

NVD

Node

sapsapgui

sapsapguiRange≤7.10

sapsapguiMatch4.6

sapsapguiMatch4.6windows

sapsapguiMatch4.6a

sapsapguiMatch4.6awindows

sapsapguiMatch4.6b

sapsapguiMatch4.6bwindows

sapsapguiMatch4.6c

sapsapguiMatch4.6cwindows

sapsapguiMatch4.6d

sapsapguiMatch4.6dwindows

sapsapguiMatch6.40

CPENameOperatorVersion
sap:sapguisap sapguieq*
sap:sapguisap sapguile7.10
sap:sapguisap sapguieq4.6
sap:sapguisap sapguieq4.6a
sap:sapguisap sapguieq4.6b
sap:sapguisap sapguieq4.6c
sap:sapguisap sapguieq4.6d
sap:sapguisap sapguieq6.40

CPE	Name	Operator	Version
sap:sapgui	sap sapgui	eq	*
sap:sapgui	sap sapgui	le	7.10
sap:sapgui	sap sapgui	eq	4.6
sap:sapgui	sap sapgui	eq	4.6a
sap:sapgui	sap sapgui	eq	4.6b
sap:sapgui	sap sapgui	eq	4.6c
sap:sapgui	sap sapgui	eq	4.6d
sap:sapgui	sap sapgui	eq	6.40