CVE-2008-4827

no score yetEPSS 6.7%

Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions.

EPSS: 6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2009-01-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

componentone:sizerone
sap:sap_gui
sap:tabone
servantix:tsc2_help_desk

References

http://secunia.com/advisories/32609
http://secunia.com/advisories/32648
http://secunia.com/advisories/32672
http://secunia.com/secunia_research/2008-52/
http://secunia.com/secunia_research/2008-53/

Check your stack JSON