Lucene search
HistoryJan 22, 2008 - 8:00 p.m.
CVE-2008-0379
cve
2008
0379
race condition
enterprise tree
activex control
crystal reports xi
remote attackers
denial of service
crash
arbitrary code
buffer overflow
nvd
8 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.017 Low
EPSS
Percentile
87.7%
Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.
Affected configurations
Node
businessobjectscrystal_reports_xiMatchr2
| CPE | Name | Operator | Version |
|---|---|---|---|
| businessobjects:crystal_reports_xi | businessobjects crystal reports xi | eq | r2 |
Related
nvd
nvd
CVE-2008-0379
2008-01-22 20:00:00
cvelist
cvelist
CVE-2008-0379
2008-01-22 19:00:00
prion
prion
Race condition
2008-01-22 20:00:00
8 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2008-0379