CVE-2007-6254

Published Mar 20, 2008

Last updated 7 years ago

Overview

Description: Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.
Source: cret@cert.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sap:business_objects:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1BD5A176-9F56-45BB-8A01-F14DED89413D",
            "versionEndIncluding": "6.5"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References