Lucene search

K
cve[email protected]CVE-2010-4556
HistoryDec 17, 2010 - 7:00 p.m.

CVE-2010-4556

2010-12-1719:00:24
CWE-119
web.nvd.nist.gov
23
cve-2010-4556
sap
netweaver
business client
buffer overflow
security vulnerability
remote code execution
activex
control

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.215 Low

EPSS

Percentile

96.4%

Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.

Affected configurations

NVD
Node
sapnetweaver_business_client

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.215 Low

EPSS

Percentile

96.4%

Related for CVE-2010-4556