VULNERABILITY INTELLIGENCE
CVE-2007-6254
CVSS score9.3 HIGH
EPSS probability6.46%
CISA KEVNot currently listed
Published2008-03-20
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- cret@cert.org — Vendor Advisory
- cret@cert.org — Exploit, US Government Resource
- cret@cert.org — Patch
- cret@cert.org
- cret@cert.org
- cret@cert.org
- cret@cert.org
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108