CVE-2008-4387

critical Microsoft
CVSS v3 Base Score
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
18.2%
Exploitation probability in 30 days
Top 5% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: November 10, 2008 (6394 days ago)
Last Modified: April 23, 2026
Vendor: Microsoft
Source: NVD

Description

Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.

CWE

CWE-94

Affected Products

sap sapguisimba technologies mdrmsap activex control

References

🔗 osvdb.org 🔗 www.kb.cert.org 🔗 www.securityfocus.com 🔗 www.vupen.com 🔗 exchange.xforce.ibmcloud.com