Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2008-0379 (Crystal Reports, ActiveX)

BugsAlert Home > CVE-2008-0379 (Crystal Reports, ActiveX)
 
 

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0379

Learn more about CVE-2008-0379 (Crystal Reports, ActiveX)
 
Tags: cve-2008-0379 crystal reports activex

Related Items

      RedHat: Moderate: bzip2 security update

      Liferea "LD_LIBRARY_PATH" Variable Local Code Execution Vulnerability

      CVE-2008-2780 (Anubis Plugin)

      CVE-2008-2187 (mjguest)

      Vuln: RealNetworks RealPlayer SWF File Heap Based Buffer Overflow Vulnerability

      Brief: State admits flaws in passport control

      IBM Tivoli Service Desk Description Cross Site Scripting Vulnerability

 

Pixel