CVE-2011-5154

MEDIUM 6.9CVE-2011-5154 · Published 06/09/2012 · updated 16/06/2026

In short

CVE-2011-5154 is a MEDIUM (CVSS 6.9) vulnerability affecting graphical user interface (sap).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
graphical user interface sap	`= 6.4= 7.2`	No fix yet

Description

Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these details are obtained from third party information.

References

dsecrg.com/pages/vul/show.php
secunia.com/advisories/43707 · Vendor Advisory
sdn.sap.com/irj/sdn/index
service.sap.com/sap/support/notes/1511179

More vulnerabilities in graphical user interface

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free