Vulnerability Details : CVE-2007-3605
Public exploit exists!
Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2007-3605
Probability of exploitation activity in the next 30 days: 95.19%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2007-3605
-
EnjoySAP SAP GUI ActiveX Control Buffer Overflow
Disclosure Date: 2007-07-05First seen: 2020-04-26exploit/windows/browser/enjoysapgui_preparetoposthtmlThis module exploits a stack buffer overflow in SAP KWEdit ActiveX Control (kwedit.dll 6400.1.1.41) provided by EnjoySAP GUI. By sending an overly long string to the "PrepareToPostHTML()" method, an attacker may be able to execute arbitrary code. Authors:
CVSS scores for CVE-2007-3605
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.6
|
HIGH | AV:N/AC:H/Au:N/C:C/I:C/A:C |
4.9
|
10.0
|
NIST |
References for CVE-2007-3605
-
http://www.securityfocus.com/bid/24772
SAP EnjoySAP KWEdit.DLL ActiveX Control Stack Buffer Overflow VulnerabilityExploit;Patch
- http://www.vupen.com/english/advisories/2007/2449
- http://www.securityfocus.com/archive/1/472887/100/0/threaded
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/35267
- http://securityreason.com/securityalert/2873
- http://www.ngssoftware.com/advisories/high-risk-vulnerability-in-enjoysap-stack-overflow/
- http://www.securityfocus.com/bid/24776
- https://www.exploit-db.com/exploits/4148
Products affected by CVE-2007-3605
- cpe:2.3:a:sap:enjoysap:*:*:*:*:*:*:*:*