CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2008-4387

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.0740%
EPSS Percentile8.82th
Published2008年11月10日
Last Modified2026年4月23日

Vulnerability Description

Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.

Affected Platforms (CPE)

📦
Sap

Sapgui

All versions
📦
Simba Technologies

Mdrmsap Activex Control

All versions

References & Advisories

🔗 http://osvdb.org/49721
🔗 http://www.kb.cert.org/vuls/id/277313
🔗 http://www.securityfocus.com/bid/32186
🔗 http://www.vupen.com/english/advisories/2008/3106
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/46440
🔗 http://osvdb.org/49721
🔗 http://www.kb.cert.org/vuls/id/277313
🔗 http://www.securityfocus.com/bid/32186

相關漏洞威脅

CVE-2016-98329.9

PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attack...

CVE-2007-44759.3

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows...

CVE-2007-36057.6

Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI al...

CVE-2003-10357.5

The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SA...