critical9.3Public exploit code
CVE-2008-0379
Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a de…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Crystal Reports XI Release 2 (Enterprise Tree Control) - ActiveX Buffer Overflow (Denial of Service) (PoC)2008-01-17 · dos · windows · Verified
Impact
Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Businessobjects | Crystal Reports Xi | Version r2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/27333
- http://www.securitytracker.com/id?1019239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39743
- https://www.exploit-db.com/exploits/4931
- http://www.securityfocus.com/bid/27333
- http://www.securitytracker.com/id?1019239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39743
- https://www.exploit-db.com/exploits/4931