SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability
BID:45387
Info
SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 45387 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-2590 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2010 12:00AM |
| Updated: | Apr 02 2013 03:47PM |
| Credit: | Dr_IDE; Dmitriy Pletnev, Secunia Research |
| Vulnerable: |
SAP Crystal Reports 2008 Print ActiveX Control 12.3.2.753 SAP Crystal Reports 2008 |
| Not Vulnerable: | |
Discussion
SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability
SAP Crystal Reports is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue affects the 'CrystalReports12.CrystalPrintControl.1' ActiveX control.
Successful exploits will allow remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
Crystal Reports 2008 SP3 Fix Pack 3.2 Print ActiveX (12.3.2.753) is vulnerable; other versions may also be affected.
SAP Crystal Reports is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue affects the 'CrystalReports12.CrystalPrintControl.1' ActiveX control.
Successful exploits will allow remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
Crystal Reports 2008 SP3 Fix Pack 3.2 Print ActiveX (12.3.2.753) is vulnerable; other versions may also be affected.
Exploit / POC
SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploits are available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploits are available:
Solution / Fix
SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability
References:
References:
- SAP Crystal Reports (SAP)
- SAP Homepage (SAP)
- Secunia Research: SAP Crystal Reports Print ActiveX Control Buffer Overflow (Secunia Research)
- Secunia Research: SAP Crystal Reports Print ActiveX Control Buffer Overflow (Secunia Research