Description
Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.
References
- http://www.zerodayinitiative.com/advisories/ZDI-10-290/
- ADV-2010-3239 vdb-entry
- 1024890 vdb-entry
- https://service.sap.com/sap/support/notes/1519966
- 45396 vdb-entry
- netweaver-activex-bo(64061) vdb-entry
- 35796 third-party-advisory