CVE-2010-4556

SAP NetWeaver Business Client - Stack-Based Buffer Overflow via SapThemeRepository ActiveX Control

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.

References (7)

Core 7
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-10-290/
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/3239
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1024890
Various Sources x_refsource_misc
https://service.sap.com/sap/support/notes/1519966
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45396
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/64061
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35796

Scores

EPSS 0.1012
EPSS Percentile 93.2%

Details

CWE
CWE-119
Status published
Products (1)
sap/netweaver_business_client
Published Dec 17, 2010
Tracked Since Feb 18, 2026