CVE-2008-4827

https://notcve.org/view.php?id=CVE-2008-4827

Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions. Múltiples desbordamientos de búfer basados en montículo en el método AddTab en los controles ActiveX (1) Tab y (2) CTab en c1sizer.ocx y control ActiveX (3) TabOne en sizerone.ocx en ComponentOne SizerOne v8.0.20081.140, como el utilizado en ComponentOne Studio para ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 y v7.10, y posiblemente otros productos, permiten a atacantes remotos ejecutar código de su elección añadiendo muchas pestañas, o añadiendo pestañas con un título largo. • http://secunia.com/advisories/32609 http://secunia.com/advisories/32648 http://secunia.com/advisories/32672 http://secunia.com/secunia_research/2008-52 http://secunia.com/secunia_research/2008-53 http://secunia.com/secunia_research/2008-54 http://securityreason.com/securityalert/4879 http://securitytracker.com/id?1021529 http://www.securityfocus.com/archive/1/499830/100/0/threaded http://www.securityfocus.com/bid/33148 http://www.vupen.com/english/advisories/2009/0036 http:& • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •