7.6
CVSSv2

CVE-2006-6133

Published: 28/11/2006 Updated: 17/10/2018
CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9
VMScore: 765
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote malicious users to execute arbitrary code via a crafted RPT file.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft visual studio .net 2005

businessobjects crystal reports xi

microsoft visual studio .net 2002

microsoft visual studio .net 2003

Exploits

source: wwwsecurityfocuscom/bid/21261/info Business Objects Crystal Reports XI Professional is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer An atacker may exploit this issue by enticing a victim user into ope ...