KLA10358 ACE vulnerability in multiple products

Buffer overflows were found in multiple products. By exploiting these vulnerabilities malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed tabs.

Original advisories

Related products

TSC2-Help-Desk

ComponentOne-Studio-Enterprise-2005

SAP-GUI

CVE list

CVE-2008-4827 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• ComponentOne Studio version for ActiveX 2008TSC2 Help Desk version 4.1.8SAP GUI versions 6.40 Patch 29 and 7.10