CVE-2008-4827

Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions.

• CWE-119

• http://secunia.com/advisories/32609Vendor Advisory
• http://secunia.com/advisories/32648Vendor Advisory
• http://secunia.com/advisories/32672Vendor Advisory
• http://secunia.com/secunia_research/2008-52/Vendor Advisory
• http://secunia.com/secunia_research/2008-53/Vendor Advisory
• http://secunia.com/secunia_research/2008-54/Vendor Advisory
• http://securityreason.com/securityalert/4879
• http://securitytracker.com/id?1021529
• http://www.securityfocus.com/archive/1/499830/100/0/threaded
• http://www.securityfocus.com/bid/33148
• http://www.vupen.com/english/advisories/2009/0036
• http://www.vupen.com/english/advisories/2009/0037
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47769
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47770
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47771
• http://secunia.com/advisories/32609Vendor Advisory
• http://secunia.com/advisories/32648Vendor Advisory
• http://secunia.com/advisories/32672Vendor Advisory
• http://secunia.com/secunia_research/2008-52/Vendor Advisory
• http://secunia.com/secunia_research/2008-53/Vendor Advisory
• http://secunia.com/secunia_research/2008-54/Vendor Advisory
• http://securityreason.com/securityalert/4879
• http://securitytracker.com/id?1021529
• http://www.securityfocus.com/archive/1/499830/100/0/threaded
• http://www.securityfocus.com/bid/33148
• http://www.vupen.com/english/advisories/2009/0036
• http://www.vupen.com/english/advisories/2009/0037
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47769
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47770
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47771

Published

Jan 8, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4821Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla bro…
• CVE-2008-4822Adobe Flash Player 9.0.124.0 and earlier does not properly i…
• CVE-2008-4823Cross-site scripting (XSS) vulnerability in Adobe Flash Play…
• CVE-2008-4824Multiple unspecified vulnerabilities in Adobe Flash Player 1…
• CVE-2008-4825Multiple buffer overflows in UltraISO 9.3.1.2633, and possib…
• CVE-2008-4826Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-4828Multiple stack-based buffer overflows in dsmagent.exe in the…
• CVE-2008-4829Multiple buffer overflows in lib/http.c in Streamripper 1.63…
• CVE-2008-4830Insecure method vulnerability in the KWEdit ActiveX control …
• CVE-2008-4831Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 an…
• CVE-2008-4832rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath…
• CVE-2008-4833Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…