Stack-Based Buffer Overflow in SAP AG SAPgui Prior to Patch Level 9

CVE-2007-4475

Summary

The EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG's SAPgui prior to patch level 9 is susceptible to a stack-based buffer overflow. This vulnerability allows remote attackers to execute arbitrary code by supplying excessively long arguments to the SaveViewToSessionFile method. This flaw poses significant security risks, enabling unauthorized actions on affected systems and necessitating prompt patch management to mitigate potential exploits.

References