CVE-2007-4475: SAP Sapgui

High severity, CVSS 9.3. EPSS: 40.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Level 9 allows remote attackers to execute arbitrary code via a long argument to the SaveViewToSessionFile method.

Affected products

• SAP Sapgui: any version; up to and including 7.10; version 4.6 only; version 4.6a only; version 4.6b only; version 4.6c only; …

Published 2009-04-01. Last modified 2026-06-16.