Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-6133
HistoryNov 28, 2006 - 1:07 a.m.

CVE-2006-6133

2006-11-2801:07:00
CWE-119
mitre
web.nvd.nist.gov
32
visual studio
crystal reports
buffer overflow
remote code execution
rpt file
cve-2006-6133

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.955

Percentile

99.4%

JSON

Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.

Affected configurations

Nvd
Node
businessobjectscrystal_reports_xiprofessional
OR
microsoftvisual_studio_.netMatch2002
OR
microsoftvisual_studio_.netMatch2002sp1
OR
microsoftvisual_studio_.netMatch2003
OR
microsoftvisual_studio_.netMatch2003sp1
OR
microsoftvisual_studio_.netMatch2005
OR
microsoftvisual_studio_.netMatch2005sp1
VendorProductVersionCPE
businessobjectscrystal_reports_xi*cpe:2.3:a:businessobjects:crystal_reports_xi:*:*:professional:*:*:*:*:*
microsoftvisual_studio_.net2002cpe:2.3:a:microsoft:visual_studio_.net:2002:*:*:*:*:*:*:*
microsoftvisual_studio_.net2002cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*
microsoftvisual_studio_.net2003cpe:2.3:a:microsoft:visual_studio_.net:2003:*:*:*:*:*:*:*
microsoftvisual_studio_.net2003cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*
microsoftvisual_studio_.net2005cpe:2.3:a:microsoft:visual_studio_.net:2005:*:*:*:*:*:*:*
microsoftvisual_studio_.net2005cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*

Related

securityvulns 2
exploitdb 1
checkpoint_advisories 1
cvelist 1
nessus 1
nvd 1
securityvulns
securityvulns
Microsoft Security Bulletin MS07-052 - Important
2007-09-11 00:00:00
Microsoft Visual Studio RPT files code execution
2007-09-11 00:00:00
exploitdb
exploitdb
Business Objects Crystal Reports XI Professional - File Handling Buffer Overflow
2006-11-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Visual Studio RPT File Handling Code Execution (MS07-052; CVE-2006-6133)
2007-09-17 00:00:00
cvelist
cvelist
CVE-2006-6133
2006-11-28 01:00:00
nessus
nessus
MS07-052: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution (941522)
2007-09-12 00:00:00
nvd
nvd
CVE-2006-6133
2006-11-28 01:07:00

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.955

Percentile

99.4%

JSON
Related for CVE-2006-6133
securityvulns2exploitdb1checkpoint_advisories1cvelist1nessus1nvd1