CVEvulnerability
CVE-2006-6133
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
Affected configurations
• businessobjects crystal reports xi
• microsoft visual studio .net 2002
• microsoft visual studio .net 2003
• microsoft visual studio .net 2005
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/23091 Vendor Advisory
- http://secunia.com/advisories/26754 Vendor Advisory
- http://securitytracker.com/id?1017279 securitytracker.com
- http://www.lssec.com/advisories/LS-20061102.pdf www.lssec.com
- http://www.securityfocus.com/archive/1/452464/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21261 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-254A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4691 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3114 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-052 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30532 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2055 oval.cisecurity.org
- http://secunia.com/advisories/23091 Vendor Advisory
- http://secunia.com/advisories/26754 Vendor Advisory
- http://securitytracker.com/id?1017279 securitytracker.com
- http://www.lssec.com/advisories/LS-20061102.pdf www.lssec.com
- http://www.securityfocus.com/archive/1/452464/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/21261 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-254A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4691 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/3114 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-052 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30532 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2055 oval.cisecurity.org