CVE-2010-4556

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-12-17 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.

Affected products

SAP Netweaver Business Client: all versions

References

http://secunia.com/advisories/35796
http://www.securityfocus.com/bid/45396
http://www.securitytracker.com/id?1024890
http://www.vupen.com/english/advisories/2010/3239
http://www.zerodayinitiative.com/advisories/ZDI-10-290/
https://exchange.xforce.ibmcloud.com/vulnerabilities/64061
https://service.sap.com/sap/support/notes/1519966
http://secunia.com/advisories/35796
http://www.securityfocus.com/bid/45396
http://www.securitytracker.com/id?1024890
http://www.vupen.com/english/advisories/2010/3239
http://www.zerodayinitiative.com/advisories/ZDI-10-290/

Get alerted when CVE-2010-4556 or the next vulnerability affects your stack