CVE-2007-3606 : Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the

Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASCII versions, allows remote attackers to execute arbitrary code via a long first argument to the LaunchGui function.

Published 2007-07-06 19:30:00

Updated 2017-09-29 01:29:04

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2007-3606

SAP » Enjoysap
cpe:2.3:a:sap:enjoysap:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-3606

EPSS FAQ

7.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3606

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.6	HIGH	AV:N/AC:H/Au:N/C:C/I:C/A:C	4.9	10.0	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-3606

Jump to

Vulnerability Details : CVE-2007-3606

Products affected by CVE-2007-3606

Exploit prediction scoring system (EPSS) score for CVE-2007-3606

CVSS scores for CVE-2007-3606

References for CVE-2007-3606