CVEvulnerability
CVE-2008-4387
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.
Affected configurations
• sap sapgui
• simba technologies mdrmsap activex control
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://osvdb.org/49721 osvdb.org
- http://www.kb.cert.org/vuls/id/277313 US Government Resource
- http://www.securityfocus.com/bid/32186 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3106 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46440 exchange.xforce.ibmcloud.com
- http://osvdb.org/49721 osvdb.org
- http://www.kb.cert.org/vuls/id/277313 US Government Resource
- http://www.securityfocus.com/bid/32186 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3106 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46440 exchange.xforce.ibmcloud.com