CVE-2008-0307

SAP MaxDB 7.6.0.37 - Remote Code Execution via Integer Signedness Error

Title source: llm
STIX 2.1

Description

Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41107
Third Party Advisory third-party-advisory x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28183
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0844/references
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29312
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019571

Scores

EPSS 0.0423
EPSS Percentile 88.9%

Details

CWE
CWE-189
Status published
Products (1)
sap/maxdb 7.6.0.37
Published Mar 11, 2008
Tracked Since Feb 18, 2026