Signature Detail

HTTP: Microsoft Visual Studio Crystal Reports RPT File Handling Code Execution

This signature detects attempts to exploit a known vulnerability in Microsoft Visual Studio. A successful attack can lead to a arbitrary remote code execution within the context of the application.

Extended Description

Business Objects Crystal Reports XI Professional is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. An atacker may exploit this issue by enticing a victim user into opening a malicious document file, resulting in the execution of arbitrary code with privileges of the vulnerable application. Failed exploit attemtps will likely result in denial-of-service conditions.

Affected Products

• Business_objects business_objects_enterprise XIr2
• Business_objects businessobjects_enterprise_xi
• Business_objects crystal_enterprise 10.0.0
• Business_objects crystal_reports_for_visual_studio_.net_2002
• Business_objects crystal_reports_for_visual_studio_.net_2003
• Business_objects crystal_reports_for_visual_studio_.net_2005 10.2
• Business_objects crystal_reports_xi_professional
• Microsoft visual_studio_2005 SP1
• Microsoft visual_studio_2005
• Microsoft visual_studio_2005_professional_edition
• Microsoft visual_studio_2005_standard_edition
• Microsoft visual_studio_2005_team_edition
• Microsoft visual_studio_2005_team_edition_for_architects
• Microsoft visual_studio_2005_team_edition_for_developers
• Microsoft visual_studio_2005_team_edition_for_testers
• Microsoft visual_studio_.net_2002 SP1
• Microsoft visual_studio_.net_2002
• Microsoft visual_studio_.net_2003 SP1
• Microsoft visual_studio_.net_2003
• Microsoft visual_studio_.net_2003_enterprise_architect
• Microsoft visual_studio_.net_academic_edition
• Microsoft visual_studio_.net_enterprise_architect_edition
• Microsoft visual_studio_.net_enterprise_developer_edition
• Microsoft visual_studio_.net_professional_edition

References

• BugTraq: 21261
• CVE: CVE-2006-6133