(Microsoft Issues Fix for Crystal Reports for Visual Studio) Crystal Reports Report File Stack Overflow Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1018679 |
|
SecurityTracker URL: http://securitytracker.com/id/1018679
|
|
CVE Reference:
CVE-2006-6133
(Links to External Site)
|
Date: Sep 11 2007
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): .NET 2002 SP1, .NET 2003 SP1, 2005 SP1; and prior service packs
|
Description:
A vulnerability was reported in Crystal Reports. A remote user can cause arbitrary code to be executed on the target user's system. Crystal Reports for Visual Studio is affected.
A remote user can create a specially crafted '.RPT' file that, when loaded by the target user, will trigger a stack overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.
LSsec discovered this vulnerability.
The original advisory is available at:
http://www.lssec.com/advisories/LS-20061102.pdf
A demonstration exploit is available at:
http://www.lssec.com/exploits/LS-20061102.rar
|
Impact:
A remote user can create a '.RPT' file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution:
Microsoft has issued the following fixes for Crystal Reports for Visual Studio, which is affected by this vulnerability:
Visual Studio .NET 2002 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=2608C83B-E1B2-4449-9A0E-1E566AAC3D76
Visual Studio .NET 2003:
http://www.microsoft.com/downloads/details.aspx?FamilyId=D612AD41-5A0D-4E13-99EA-D6A5589786D6
Visual Studio .NET 2003 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=0B10B04B-932C-4BFF-9CBC-B3EEB15064B1
Visual Studio 2005:
http://www.microsoft.com/downloads/details.aspx?FamilyId=21073CC2-919C-40DF-8EBB-AA3DB06050D2
Visual Studio 2005 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=967D43C8-EFBA-4221-BEB0-981E7DEEF33A
A restart may be required.
Microsoft Office Outlook 2003 with Business Contact Manager and Microsoft Office Outlook 2007 with Business Contact Manager are not affected.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms07-052.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms07-052.mspx (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS: Windows (Any)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
