Vulnerabilities > SAP > Sapgui > 4.6d

DATE CVE VULNERABILITY TITLE RISK
2009-04-01 CVE-2007-4475 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in SAP Sapgui
Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.
network
sap CWE-119
critical
9.3
2004-04-15 CVE-2003-1035 Unspecified vulnerability in SAP R 3 and Sapgui
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.
network
low complexity
sap
7.5
2004-04-15 CVE-2002-1579 Denial of Service vulnerability in SAP SAPgui
SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.
network
low complexity
sap
5.0