SAP Crystal Reports Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	43929
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 12 2010 12:00AM
Updated:	Oct 12 2010 12:00AM
Credit:	AbdulAziz Hariri and Andrea Micalizzi aka rgod
Vulnerable:	SAP Crystal Reports Server 2008 0 SAP Crystal Reports 9 SAP Crystal Reports 2008
Not Vulnerable:

SAP Crystal Reports Multiple Remote Buffer Overflow Vulnerabilities

SAP Crystal Reports is prone to multiple remote buffer-overflow vulnerabilities because it fails to perform adequate boundary-checks on user-supplied data.

Successful exploits will allow attackers to execute arbitrary code in the context of the SYSTEM user. Failed exploit attempts will likely crash the application.

SAP Crystal Reports Multiple Remote Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SAP Crystal Reports Multiple Remote Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

SAP Crystal Reports Multiple Remote Buffer Overflow Vulnerabilities

References:

• Crystal Reports Product Page (Business Objects)
  
• SAP Homepage (SAP)
  
• ZDI-10-195: SAP BusinessObjects Crystal Reports Server CMS.exe Remote Code Execu (Zero Day Initiative)
  
• ZDI-10-196: SAP Crystal Reports JobServer GIOP Request Remote Code Execution Vul (Zero Day Initiative)