CVE-2007-1917

Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.

• http://secunia.com/advisories/24722Vendor Advisory
• http://securityreason.com/securityalert/2536
• http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_SYSTEM_CREATE_INSTANCE_RFC_Function_Buffer_Overflow.pdf
• http://www.securityfocus.com/archive/1/464683/100/0/threaded
• http://www.securityfocus.com/bid/23307
• http://www.vupen.com/english/advisories/2007/1270
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33416
• http://secunia.com/advisories/24722Vendor Advisory
• http://securityreason.com/securityalert/2536
• http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_SAP_SYSTEM_CREATE_INSTANCE_RFC_Function_Buffer_Overflow.pdf
• http://www.securityfocus.com/archive/1/464683/100/0/threaded
• http://www.securityfocus.com/bid/23307
• http://www.vupen.com/english/advisories/2007/1270
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33416

Published

Apr 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1911Multiple unspecified vulnerabilities in Microsoft Word 2007 …
• CVE-2007-1912Heap-based buffer overflow in Microsoft Windows allows user-…
• CVE-2007-1913The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library …
• CVE-2007-1914The RFC_START_PROGRAM function in the SAP RFC Library 6.40 a…
• CVE-2007-1915Buffer overflow in the RFC_START_PROGRAM function in the SAP…
• CVE-2007-1916Buffer overflow in the RFC_START_GUI function in the SAP RFC…
• CVE-2007-1918The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Libr…
• CVE-2007-1919Cross-site scripting (XSS) vulnerability in index.php in Ari…
• CVE-2007-1920SQL injection vulnerability in index.php in the aktualnosci …
• CVE-2007-1921LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and poss…
• CVE-2007-1922The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules i…
• CVE-2007-1923(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement acces…