VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 6, 2012· Updated Jun 16, 2026

CVE-2011-5154

CVE-2011-5154

Description

Multiple untrusted search path vulnerabilities in (1) SAPGui.exe and (2) BExAnalyzer.exe in SAP GUI 6.4 through 7.2 allow local users to gain privileges via a Trojan horse MFC80LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .sap file. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • SAP/Graphical User Interface2 versions
    cpe:2.3:a:sap:graphical_user_interface:6.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:graphical_user_interface:6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:graphical_user_interface:7.2:*:*:*:*:*:*:*
  • SAP/Sapguillm-create
    Range: >=6.4, <=7.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.