CyberSec.Space Logo
Back to CVE Browser

CVE-2008-4387

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.0740%
EPSS Percentile8.82th
PublishedNov 10, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.

Affected Platforms (CPE)

📦
Sap

Sapgui

All versions
📦
Simba Technologies

Mdrmsap Activex Control

All versions

References & Advisories

🔗 http://osvdb.org/49721
🔗 http://www.kb.cert.org/vuls/id/277313
🔗 http://www.securityfocus.com/bid/32186
🔗 http://www.vupen.com/english/advisories/2008/3106
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/46440
🔗 http://osvdb.org/49721
🔗 http://www.kb.cert.org/vuls/id/277313
🔗 http://www.securityfocus.com/bid/32186

Related Vulnerabilities

CVE-2016-98329.9

PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attack...

CVE-2007-44759.3

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows...

CVE-2007-36057.6

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI al...

CVE-2003-10357.5

The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SA...