RCE in Microsoft Internet_explorer
CVE-2008-4387
Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.155 (96.4th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_OSVDB, vdb-entry)
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)