NVD

Id
4641  
Name
CVE-2008-4827  
Description
Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-01-08  
Modified Date
2011-03-07  
Seq
2008-4827  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29097 4641 CVE-2008-4827 4879  View
29098 4641 CVE-2008-4827 1021529  View
29099 4641 CVE-2008-4827 20090107 Secunia Research: TSC2 Help Desk CTab ActiveX Control Buffer Overflow  View
29100 4641 CVE-2008-4827 33148  View
29101 4641 CVE-2008-4827 ADV-2009-0036  View
29102 4641 CVE-2008-4827 ADV-2009-0037  View
29103 4641 CVE-2008-4827 tsc2-ctab-bo(47769)  View
29104 4641 CVE-2008-4827 sapgui-tabone-bo(47770)  View
29105 4641 CVE-2008-4827 sizerone-tab-bo(47771)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40611 JVNDB-2009-001617 AddTab メソッドにおける複数のヒープオーバーフローの脆弱性 (1) Tab および (2) c1sizer.ocx の CTab ActiveX コントロール、(3) ActiveX 2008 、TSC2 Help Desk 、SAP GUI およびその他製品の ComponentOne Studio で使用されている ComponentOne SizerOne の sizerone.ocx の TabOne ActiveX コントロールの AddTab メソッドには、複数のヒープオーバーフローの脆弱性が存在します。 CVE-2008-4827 34940 CVE-2008-4827 4641 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001617.html 2009-01-08 2009-07-08 View