| Description: | | A buffer overflow vulnerability has been reported in SAP GUI SAPBExCommonResources ActiveX control. The vulnerability is due to a design weakness in the Execute function of the ActiveX Object BExGlobal. This may allow remote attackers to execute arbitrary command by enticing the target user to open a maliciously crafted HTML document. In a successful attack scenario, where arbitrary code is injected and executed on the vulnerable target host, the behaviour of the target system is dependent on the malicious code. Note that any code executed by the attacker runs with the privileges of the logged in user. If code execution is not successful, a denial of service condition may occur on the target system. |