Race condition

2008-01-2220:00:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.8%

JSON

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.

CPENameOperatorVersion
crystal_reports_xieq2.0.114

CPE	Name	Operator	Version
	crystal_reports_xi	eq	2.0.114

References

www.securityfocus.com/bid/27333

www.securitytracker.com/id?1019239

exchange.xforce.ibmcloud.com/vulnerabilities/39743

www.exploit-db.com/exploits/4931