CyberSec.Space Logo
返回 CVE 浏览器

CVE-2007-3605

HIGH
7.6
CVSS Severity Score
EPSS Score0.0620%
EPSS Percentile41.06th
Published2007年7月6日
Last Modified2026年4月23日

Vulnerability Description

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function.

Affected Platforms (CPE)

📦
Sap

Enjoysap

All versions

References & Advisories

🔗 http://osvdb.org/37690
🔗 http://secunia.com/advisories/25959
🔗 http://securityreason.com/securityalert/2873
🔗 http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/
🔗 http://www.securityfocus.com/archive/1/472887/100/0/threaded
🔗 http://www.securityfocus.com/bid/24772
🔗 http://www.securityfocus.com/bid/24776
🔗 http://www.vupen.com/english/advisories/2007/2449

相关漏洞威胁

CVE-2007-36067.6

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions...

CVE-2007-36075.0

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a denial of servi...

CVE-2007-36085.0

Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certain files vi...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.