CVE-2008-4387
high · 9.3Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.
9.3
CVSS
15.5%
EPSS (exploit prob.)
97th
EPSS percentile
2008-11-10
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| sap | sapgui | all versions |
| simba_technologies | mdrmsap_activex_control | all versions |
| microsoft | internet_explorer | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/49721
- http://www.kb.cert.org/vuls/id/277313
- http://www.securityfocus.com/bid/32186
- http://www.vupen.com/english/advisories/2008/3106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46440
- http://osvdb.org/49721
- http://www.kb.cert.org/vuls/id/277313
- http://www.securityfocus.com/bid/32186
- http://www.vupen.com/english/advisories/2008/3106
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46440
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-4387