CVE-2010-4556

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.15%

Published

Dec 17, 2010

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.

Weaknesses (CWE)

CWE-119

Affected Products (1)

sap · netweaver_business_clientvulnerable

References (14)

http://secunia.com/advisories/35796

Vendor Advisory

http://www.securityfocus.com/bid/45396

http://www.securitytracker.com/id?1024890

http://www.vupen.com/english/advisories/2010/3239

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-10-290/

https://exchange.xforce.ibmcloud.com/vulnerabilities/64061

https://service.sap.com/sap/support/notes/1519966

http://secunia.com/advisories/35796

Vendor Advisory

http://www.securityfocus.com/bid/45396

http://www.securitytracker.com/id?1024890

http://www.vupen.com/english/advisories/2010/3239

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-10-290/

https://exchange.xforce.ibmcloud.com/vulnerabilities/64061

https://service.sap.com/sap/support/notes/1519966

KEV Catalog EPSS Scores Vendors All CVEs