CVEvulnerability
CVE-2010-4556
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.
Affected configurations
• sap netweaver business client
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/35796 Vendor Advisory
- http://www.securityfocus.com/bid/45396 www.securityfocus.com
- http://www.securitytracker.com/id?1024890 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/3239 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-290/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64061 exchange.xforce.ibmcloud.com
- https://service.sap.com/sap/support/notes/1519966 service.sap.com
- http://secunia.com/advisories/35796 Vendor Advisory
- http://www.securityfocus.com/bid/45396 www.securityfocus.com
- http://www.securitytracker.com/id?1024890 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/3239 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-290/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64061 exchange.xforce.ibmcloud.com
- https://service.sap.com/sap/support/notes/1519966 service.sap.com