Unscored severity · published Nov 28, 2006
CVE-2006-6133
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business…
–
CVSS
54%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
Exploitation
Is it being used?
Exploit prediction (EPSS)54.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crystal Reports XI · Businessobjects
All versions, or not specified · source: NVD
VS
Visual Studio .net · Microsoft
2002; 2002; 2003; 2003; 2005; 2005 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6133
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6133
Vendor Advisory
http://secunia.com/advisories/23091
Vendor Advisory
http://secunia.com/advisories/26754
securitytracker.com
http://securitytracker.com/id?1017279
www.lssec.com
http://www.lssec.com/advisories/LS-20061102.pdf
www.securityfocus.com
http://www.securityfocus.com/archive/1/452464/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21261
More from Crystal Reports XI
–
CVE-2008-0379
Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service…
–
CVE-2005-4813
Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and…