CVE-2007-3607

Technical details of CVE-2007-3607 are not publicly provided in the supplied documents. Only a generic description of unspecified ActiveX control vulnerabilities affecting EnjoySAP SAP GUI is available; monitor for official updates.

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3606

CVE-2007-3606 affects EnjoySAP SAP GUI’s rfcguisink.rfcguisink.1 ActiveX control on ASCII versions. The vulnerability is a heap-based buffer overflow triggered by a long first argument to the LaunchGui function, allowing remote code execution. Connected sources confirm the heap overflow in this A...

CVE-2007-3605

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

CVE-2007-3605

CVE-2007-3605 is a stack-based buffer overflow in SAP GUI’s EnjoySAP KWEdit ActiveX (kwedit.dll) that allows remote code execution via a too-long argument to PrepareToPostHTML. Public references mention kwedit.dll (version 6400.1.1.41 in the Metasploit module) and an exploit presence (Exploit-DB ...

CVE-2007-3608

CVE-2007-3608 concerns vulnerable ActiveX controls in the EnjoySAP SAP GUI. The available records indicate multiple unspecified vulnerabilities that enable remote attackers to create certain files via unspecified vectors. The description does not specify affected product versions, root cause deta...

CVE-2007-3608

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

EnjoySAP, SAP GUI for Windows - Stack Overflow

======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ========...

EnjoySAP ActiveX kweditcontrol.kwedit.1 Remote Stack Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= EnjoySAP ActiveX kweditcontrol.kwedit.1 Remote Stack Overflow PoC ================================================================= Vendor: SAP Vendor Reference: SECRES-289 Systems...

EnjoySAP SAP GUI multiple ActiveX security vulnerabilities

Multiple DoS conditions, buffer overflows, file creation...

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow (PoC)

EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow PoC Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Status: Fixed ======== TimeLine ======== Discovered: 4 January 2007 Released: 19 January 2007 Approved: 29 January 2007 Reported: 11 January 2007...

EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC ================================================================= Vendor: SAP Vendor Reference: SECRES-290 Systems...

CVE-2002-1579

SAP GUI Sapgui 4.6D allows remote attackers to cause a denial of service crash via a connection to a high-numbered port, which generates an "unknown connection data" error...

CVE-2002-1579

The vulnerability CVE-2002-1579 affects SAP GUI (Sapgui) 4.6D. A remote attacker can cause a crash by connecting to a high-numbered port, triggering an “unknown connection data” error. The available documents confirm the affected product and the crash-inducing connection vector, with no details o...

CVE-2002-1579

SAP GUI Sapgui 4.6D allows remote attackers to cause a denial of service crash via a connection to a high-numbered port, which generates an "unknown connection data" error...