CVE-2010-4556

Impact

Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/35796
• http://www.securityfocus.com/bid/45396
• http://www.securitytracker.com/id?1024890
• http://www.vupen.com/english/advisories/2010/3239
• http://www.zerodayinitiative.com/advisories/ZDI-10-290/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64061
• https://service.sap.com/sap/support/notes/1519966
• http://secunia.com/advisories/35796
• http://www.securityfocus.com/bid/45396
• http://www.securitytracker.com/id?1024890
• http://www.vupen.com/english/advisories/2010/3239
• http://www.zerodayinitiative.com/advisories/ZDI-10-290/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64061
• https://service.sap.com/sap/support/notes/1519966