Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

Code injection

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3606

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function...

CVE-2007-3608

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3605

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3605

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

CVE-2007-3607

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

CVE-2007-3608

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3605

CVE-2007-3605 is a stack-based buffer overflow in SAP GUI’s EnjoySAP KWEdit ActiveX (kwedit.dll) that allows remote code execution via a too-long argument to PrepareToPostHTML. Public references mention kwedit.dll (version 6400.1.1.41 in the Metasploit module) and an exploit presence (Exploit-DB ...

CVE-2007-3606

CVE-2007-3606 affects EnjoySAP SAP GUI’s rfcguisink.rfcguisink.1 ActiveX control on ASCII versions. The vulnerability is a heap-based buffer overflow triggered by a long first argument to the LaunchGui function, allowing remote code execution. Connected sources confirm the heap overflow in this A...

CVE-2007-3607

Technical details of CVE-2007-3607 are not publicly provided in the supplied documents. Only a generic description of unspecified ActiveX control vulnerabilities affecting EnjoySAP SAP GUI is available; monitor for official updates.

CVE-2007-3608

CVE-2007-3608 concerns vulnerable ActiveX controls in the EnjoySAP SAP GUI. The available records indicate multiple unspecified vulnerabilities that enable remote attackers to create certain files via unspecified vectors. The description does not specify affected product versions, root cause deta...

EnjoySAP ActiveX kweditcontrol.kwedit.1 Remote Stack Overflow PoC

No description provided by source. !-- ======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Stack Overflow Release Date: 5 July 2007 Reference: NGS00483 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-289 Systems Affected: All Versions Risk: High Statu...

EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC

No description provided by source. !-- ======= Summary ======= Name: EnjoySAP, SAP GUI for Windows - Heap Overflow Release Date: 5 July 2007 Reference: NGS00482 Discover: Mark Litchfield [email protected] Vendor: SAP Vendor Reference: SECRES-290 Systems Affected: All ASCII Versions Risk: High...

CVE-2007-3606: Undefined Security Weakness

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function...

CVE-2007-3608: Undefined Security Weakness

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors...

CVE-2007-3605: Undefined Security Weakness

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function...

CVE-2007-3607: Undefined Security Weakness

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of service process crash via unspecified vectors...

EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================= EnjoySAP ActiveX rfcguisink.rfcguisink.1 Remote Heap Overflow PoC ================================================================= Vendor: SAP Vendor Reference: SECRES-290 Systems...