CVEvulnerability
CVE-2007-6254
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• sap business objects (<= 6.5)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/29437 Vendor Advisory
- http://www.kb.cert.org/vuls/id/329673 Exploit, US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-732R7X Patch
- http://www.securityfocus.com/bid/28292 www.securityfocus.com
- http://www.securitytracker.com/id?1019668 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0927/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41256 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29437 Vendor Advisory
- http://www.kb.cert.org/vuls/id/329673 Exploit, US Government Resource
- http://www.kb.cert.org/vuls/id/MIMG-732R7X Patch
- http://www.securityfocus.com/bid/28292 www.securityfocus.com
- http://www.securitytracker.com/id?1019668 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/0927/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41256 exchange.xforce.ibmcloud.com