CVE-2008-4827
Critical
Description
Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions.
SeverityCritical
CVSS9.3
Exploit probability—
Product
Componentone Sizerone
PublishedJan 8, 2009
First seenJan 8, 2009
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| componentone sizerone | 8.0.20081.140 | — |
| sap sap_gui | 6.40, 7.10 | — |
| sap tabone | 7.0.0.16 | — |
| servantix tsc2_help_desk | 4.18 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.