CVE-2008-0379: Buffer Copy without Checking Size of Input

Race condition in the Enterprise Tree ActiveX control EnterpriseControls.dll 11.5.0.313 in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow...