NetSight
IP …
critical9.3Public exploit code

CVE-2007-4475

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.

Affected products

VendorProductAffected versions
SapSapgui
All versions
through 7.10
Versions 4.6, 4.6a, 4.6b, 4.6c

Weakness classification

CWE-119

References