CVE-2010-4556
Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.
- Score
- CVSS 2.0 9.3 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2010-12-17
- Last modified
- 2024-08-07
- Weaknesses
- CWE-119
Affected products
References
- http://secunia.com/advisories/35796
- http://www.securityfocus.com/bid/45396
- http://www.securitytracker.com/id?1024890
- http://www.vupen.com/english/advisories/2010/3239
- http://www.zerodayinitiative.com/advisories/ZDI-10-290/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64061
- https://service.sap.com/sap/support/notes/1519966
