CVE-2008-4827: Buffer Overflow
Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4827?
CVE-2008-4827 has a critical severity due to multiple heap-based buffer overflows which can lead to arbitrary code execution.
How do I fix CVE-2008-4827?
To fix CVE-2008-4827, update to the latest patched version of the affected software components.
What software is affected by CVE-2008-4827?
CVE-2008-4827 affects ComponentOne SizerOne, various versions of SAP GUI, and TSC2 Help Desk.
What can exploit CVE-2008-4827?
CVE-2008-4827 can be exploited by sending specially crafted data to the affected ActiveX controls.
Is CVE-2008-4827 an ActiveX vulnerability?
Yes, CVE-2008-4827 is a vulnerability in ActiveX controls, specifically the AddTab method in certain controls.