Buffer overflow in Sap Business_objects
CVE-2007-6254
Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.
Vulnerability class: Buffer Overflow
EPSS: 0.065 (93.0th percentile) — read the EPSS interpretation.
Affected products
- Sap Business_objects
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_CONFIRM, Patch)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Exploit, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2007-6254?
- CVE-2007-6254 is a vulnerability in Sap Business_objects, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2008-03-20.
- Is CVE-2007-6254 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.