CVE-2007-4475
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 40%
from disclosure to weapon0 days
Published on NVDApr 1
1st PoCMar 31
metasploitMar 31
exploitation probability
40%top 2% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16575unverifiedexploitdbwww.exploit-db.com/exploits/32879unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.