medium5.0Public exploit code
CVE-2007-3608
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EnjoySAP ActiveX rfcguisink.rfcguisink.1 - Remote Heap Overflow (PoC)2007-07-05 · dos · windows · Verified
- EnjoySAP ActiveX kweditcontrol.kwedit.1 - Remote Stack Overflow (PoC)2007-07-05 · dos · windows · Verified
Impact
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Enjoysap | All versions |
References
- NVD record
- CVE.org record
- http://osvdb.org/37687
- http://securityreason.com/securityalert/2873
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/
- http://www.securityfocus.com/archive/1/472887/100/0/threaded
- http://www.securityfocus.com/bid/24776
- https://www.exploit-db.com/exploits/4148
- https://www.exploit-db.com/exploits/4149
- http://osvdb.org/37687
- http://securityreason.com/securityalert/2873
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/
- http://www.securityfocus.com/archive/1/472887/100/0/threaded
- http://www.securityfocus.com/bid/24776
- https://www.exploit-db.com/exploits/4148
- https://www.exploit-db.com/exploits/4149