Detections
Analytics
SAP GUI Moniker Creation Multiple Vulnerabilities
high Nessus Plugin ID 36073
Synopsis
The remote Windows host has an ActiveX control that is affected by multiple buffer overflow vulnerabilities.Description
The version of the SAP GUI Moniker Creation ActiveX control installed on the remote Windows host is reportedly affected by 3 stack-based buffer overflows involving various properties and methods in 'MonikerUtil_dll.dll'. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage these issues to execute arbitrary code subject to the user's privileges.Solution
Upgrade to SAP GUI 7.10 Patch Level 9 or newer.See Also
http://www.attrition.org/pipermail/vim/2009-September/002260.html
Plugin Details
Severity: High
ID: 36073
File Name: sap_sapgui_activex.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 4/1/2009
Updated: 7/27/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:sap:sapgui
Required KB Items: SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/31/2009
Vulnerability Publication Date: 3/31/2009
Exploitable With
Core Impact
Metasploit (SAP AG SAPgui EAI WebViewer3D Buffer Overflow)
Reference Information
CVE: CVE-2007-4475
BID: 34310