CVE-2007-6254

Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll in Business Objects 6.5 before CHF74 allows remote attackers to execute arbitrary code via unspecified vectors.

• CWE-119

• http://secunia.com/advisories/29437Vendor Advisory
• http://www.kb.cert.org/vuls/id/329673Exploit, US Government Resource
• http://www.kb.cert.org/vuls/id/MIMG-732R7XPatch
• http://www.securityfocus.com/bid/28292
• http://www.securitytracker.com/id?1019668
• http://www.vupen.com/english/advisories/2008/0927/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41256
• http://secunia.com/advisories/29437Vendor Advisory
• http://www.kb.cert.org/vuls/id/329673Exploit, US Government Resource
• http://www.kb.cert.org/vuls/id/MIMG-732R7XPatch
• http://www.securityfocus.com/bid/28292
• http://www.securitytracker.com/id?1019668
• http://www.vupen.com/english/advisories/2008/0927/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41256

Published

Mar 20, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6246Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, a…
• CVE-2007-6247Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-6249etc-update in Portage before 2.1.3.11 on Gentoo Linux relies…
• CVE-2007-6250Stack-based buffer overflow in AOL AOLMediaPlaybackControl (…
• CVE-2007-6252Multiple stack-based buffer overflows in the Learn2 Corporat…
• CVE-2007-6253Multiple buffer overflows in Adobe Form Designer 5.0 and For…
• CVE-2007-6255Buffer overflow in the Microsoft HeartbeatCtl ActiveX contro…
• CVE-2007-6256Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2007-6258Multiple stack-based buffer overflows in the legacy mod_jk2 …
• CVE-2007-6260The installation process for Oracle 10g and llg uses account…
• CVE-2007-6261Integer overflow in the load_threadstack function in the Mac…
• CVE-2007-6262A certain ActiveX control in axvlc.dll in VideoLAN VLC 0.8.6…