Vulnerability in Sap Gui
CVE-2008-4830
Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files via the OpenDocument method.
EPSS: 0.276 (97.9th percentile) — read the EPSS interpretation.
Affected products
- Sap Sap_gui — versions 6.40, 7.10
- N/a — versions n/a
Public proof-of-concept exploits
References
- PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ)
- PSIRT-CNA@flexerasoftware.com (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2008-4830?
- CVE-2008-4830 is a vulnerability in Sap Gui. Published 2009-04-16.
- Is CVE-2008-4830 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.