SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Microsoft Visual Studio Vendors:   Microsoft
(Microsoft Issues Fix for Crystal Reports for Visual Studio) Crystal Reports Report File Stack Overflow Lets Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1018679
SecurityTracker URL:  http://securitytracker.com/id/1018679
CVE Reference:   CVE-2006-6133   (Links to External Site)
Date:  Sep 11 2007
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  
Version(s): .NET 2002 SP1, .NET 2003 SP1, 2005 SP1; and prior service packs
Description:   A vulnerability was reported in Crystal Reports. A remote user can cause arbitrary code to be executed on the target user's system. Crystal Reports for Visual Studio is affected.

A remote user can create a specially crafted '.RPT' file that, when loaded by the target user, will trigger a stack overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.

LSsec discovered this vulnerability.

The original advisory is available at:

http://www.lssec.com/advisories/LS-20061102.pdf

A demonstration exploit is available at:

http://www.lssec.com/exploits/LS-20061102.rar

Impact:   A remote user can create a '.RPT' file that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution:   Microsoft has issued the following fixes for Crystal Reports for Visual Studio, which is affected by this vulnerability:

Visual Studio .NET 2002 Service Pack 1:

http://www.microsoft.com/downloads/details.aspx?FamilyId=2608C83B-E1B2-4449-9A0E-1E566AAC3D76

Visual Studio .NET 2003:

http://www.microsoft.com/downloads/details.aspx?FamilyId=D612AD41-5A0D-4E13-99EA-D6A5589786D6

Visual Studio .NET 2003 Service Pack 1:

http://www.microsoft.com/downloads/details.aspx?FamilyId=0B10B04B-932C-4BFF-9CBC-B3EEB15064B1

Visual Studio 2005:

http://www.microsoft.com/downloads/details.aspx?FamilyId=21073CC2-919C-40DF-8EBB-AA3DB06050D2

Visual Studio 2005 Service Pack 1:

http://www.microsoft.com/downloads/details.aspx?FamilyId=967D43C8-EFBA-4221-BEB0-981E7DEEF33A

A restart may be required.

Microsoft Office Outlook 2003 with Business Contact Manager and Microsoft Office Outlook 2007 with Business Contact Manager are not affected.

The Microsoft advisory is available at:

http://www.microsoft.com/technet/security/bulletin/ms07-052.mspx

Vendor URL:  www.microsoft.com/technet/security/bulletin/ms07-052.mspx (Links to External Site)
Cause:   Boundary error
Underlying OS:  Windows (Any)

Message History:   This archive entry is a follow-up to the message listed below.
Nov 24 2006 Crystal Reports Report File Stack Overflow Lets Remote Users Execute Arbitrary Code



 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2020, SecurityGlobal.net LLC