(Microsoft Issues Fix for Crystal Reports for Visual Studio) Crystal Reports Report File Stack Overflow Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1018679
|
|
SecurityTracker URL: http://securitytracker.com/id?1018679
|
|
CVE Reference: CVE-2006-6133
(Links to External Site)
|
Date: Sep 11 2007
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: Microsoft Security Bulletin
|
Version(s): .NET 2002 SP1, .NET 2003 SP1, 2005 SP1; and prior service packs
|
Description: A vulnerability was reported in Crystal Reports. A remote user can cause arbitrary code to be executed on the target user's system. Crystal Reports for Visual Studio is affected.
A remote user can create a specially crafted '.RPT' file that, when loaded by the target user, will trigger a stack overflow and
execute arbitrary code on the target system. The code will run with the privileges of the target user.
LSsec discovered this
vulnerability.
The original advisory is available at:
http://www.lssec.com/advisories/LS-20061102.pdf
A demonstration exploit
is available at:
http://www.lssec.com/exploits/LS-20061102.rar
|
Impact: A remote user can create a '.RPT' file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution: Microsoft has issued the following fixes for Crystal Reports for Visual Studio, which is affected by this vulnerability:
Visual
Studio .NET 2002 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=2608C83B-E1B2-4449-9A0E-1E566AAC3D76
Visual
Studio .NET 2003:
http://www.microsoft.com/downloads/details.aspx?FamilyId=D612AD41-5A0D-4E13-99EA-D6A5589786D6
Visual Studio
.NET 2003 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=0B10B04B-932C-4BFF-9CBC-B3EEB15064B1
Visual
Studio 2005:
http://www.microsoft.com/downloads/details.aspx?FamilyId=21073CC2-919C-40DF-8EBB-AA3DB06050D2
Visual Studio 2005
Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?FamilyId=967D43C8-EFBA-4221-BEB0-981E7DEEF33A
A restart may
be required.
Microsoft Office Outlook 2003 with Business Contact Manager and Microsoft Office Outlook 2007 with Business Contact
Manager are not affected.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms07-052.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms07-052.mspx (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Windows (Any)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Tue, 11 Sep 2007 13:25:09 -0400
Subject: Microsoft Security Bulletin MS07-052 - Important: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution (941522)
|
http://www.microsoft.com/technet/security/bulletin/ms07-052.mspx
CVE-2006-6133
|
|
