SAP Crystal Reports 'ebus-3-3-2-6.dll' Module Remote Integer Overflow Vulnerability

Bugtraq ID:	42374
Class:	Boundary Condition Error
CVE:	CVE-2010-3032
Remote:	Yes
Local:	No
Published:	Aug 11 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Aaron Portnoy, TippingPoint DVLabs
Vulnerable:	SAP Crystal Reports 2008
Not Vulnerable:

SAP Crystal Reports 'ebus-3-3-2-6.dll' Module Remote Integer Overflow Vulnerability

SAP Crystal Reports is prone to a remote integer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary malicious code in the context of the SYSTEM user. Failed exploit attempts will likely crash the application.

SAP Crystal Reports 'ebus-3-3-2-6.dll' Module Remote Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SAP Crystal Reports 'ebus-3-3-2-6.dll' Module Remote Integer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

SAP Crystal Reports 'ebus-3-3-2-6.dll' Module Remote Integer Overflow Vulnerability

References:

• Crystal Reports Product Page (Business Objects)
  
• [Full-disclosure] ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer (ZDI Disclosures)