CVE-2008-0379

Опубликовано: 22 янв. 2008

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.

Ссылки

http://www.securityfocus.com/bid/27333
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1019239
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39743
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/4931
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/27333
Broken Link
Exploit
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1019239
Broken Link
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39743
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/4931
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:businessobjects:crystal_reports_xi:r2:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13447

Средний

9.3 Critical

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-qj8g-gjw2-qf5r

github

почти 4 года назад