CVE-2007-6254

CRITICO 9.3CVE-2007-6254 · Published 20/03/2008 · updated 16/06/2026

In breve

CVE-2007-6254 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda business objects (sap).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.5%, superiore al 93.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
business objects sap	`≤ 6.5`	No fix yet

Description

Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.

References

secunia.com/advisories/29437 · Vendor Advisory
kb.cert.org/vuls/id/329673 · Exploit
kb.cert.org/vuls/id/MIMG-732R7X · Patch
securityfocus.com/bid/28292
securitytracker.com/id
vupen.com/english/advisories/2008/0927/references
exchange.xforce.ibmcloud.com/vulnerabilities/41256

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free