CVSS: 9.3EPSS: 31%CPEs: 2EXPL: 1CVE-2008-4830 – EnjoySAP SAP GUI - ActiveX Control Arbitrary File Download
https://notcve.org/view.php?id=CVE-2008-4830
Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files via the OpenDocument method. Vulnerabilidad de método inseguro en el control ActiveX KWEdit en SAP GUI v6.40 Patch 29 (KWEDIT.DLL v6400.1.1.41) y v7.10 Patch 5 (KWEDIT.DLL v7100.1.1.43) permite a atacantes remotos (1) sobreescribir ficheros de su elección mediante el método SaveDocumentAs o (2) leer y ejecutar ficheros de su elección mediante el método OpenDocument. • https://www.exploit-db.com/exploits/16493 http://secunia.com/advisories/32869 http://secunia.com/secunia_research/2008-56 http://www.securityfocus.com/archive/1/502698/100/0/threaded http://www.securityfocus.com/bid/34524 http://www.securitytracker.com/id?1022062 http://www.vupen.com/english/advisories/2009/1043 •
CVSS: 9.3EPSS: 81%CPEs: 5EXPL: 0CVE-2008-4827
https://notcve.org/view.php?id=CVE-2008-4827
Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions. Múltiples desbordamientos de búfer basados en montículo en el método AddTab en los controles ActiveX (1) Tab y (2) CTab en c1sizer.ocx y control ActiveX (3) TabOne en sizerone.ocx en ComponentOne SizerOne v8.0.20081.140, como el utilizado en ComponentOne Studio para ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 y v7.10, y posiblemente otros productos, permiten a atacantes remotos ejecutar código de su elección añadiendo muchas pestañas, o añadiendo pestañas con un título largo. • http://secunia.com/advisories/32609 http://secunia.com/advisories/32648 http://secunia.com/advisories/32672 http://secunia.com/secunia_research/2008-52 http://secunia.com/secunia_research/2008-53 http://secunia.com/secunia_research/2008-54 http://securityreason.com/securityalert/4879 http://securitytracker.com/id?1021529 http://www.securityfocus.com/archive/1/499830/100/0/threaded http://www.securityfocus.com/bid/33148 http://www.vupen.com/english/advisories/2009/0036 http:& • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •