CVE-2014-5506

CVE-2014-5506 describes a double free vulnerability in SAP Crystal Reports, specifically in the handling of a connection string record within an RPT file. The flaw allows remote code execution and requires user interaction (the target must visit a malicious page or open a malicious file) to explo...

CVE-2010-2590

CVE-2010-2590 is a heap-based buffer overflow in the CrystalPrintControl ActiveX (PrintControl.dll 12.3.2.753) used by SAP Crystal Reports 2008 SP3 Fix Pack 3.2. The overflow is triggered by a long ServerResourceVersion property value, allowing remote code execution. Public material exists: Metas...

CVE-2019-0285

SAP Crystal Reports for Visual Studio contains a vulnerability in the .NET SDK WebForm Viewer where the viewer discloses sensitive database information, including credentials. The issue affects the WebForm Viewer component used by the SAP Crystal Reports for Visual Studio environment and is descr...

CVE-2020-6208

CVE-2020-6208 concerns SAP Business Objects Business Intelligence Platform (Crystal Reports) versions 4.1 and 4.2. Connected sources describe code injection/remote code execution vectors arising from Crystal Reports parsing/handling (e.g., ZDI-20-291). The NVD entry states a local attack that cou...

CVE-2018-2427

Public documents in the provided set do not disclose detailed technical specifics (affected components, root cause, or remediation) for CVE-2018-2427. Monitor for updates.

CVE-2010-3032

SAP Crystal Reports 2008 is affected by an integer overflow in the OBGIOPServerWorker::extractHeader function within the ebus-3-3-2-6.dll module. The vulnerability allows remote attackers to trigger a heap-based buffer overflow via a crafted GIOP packet size, potentially leading to a crash (DoS) ...

CVE-2014-5505

CVE-2014-5505 affects SAP Crystal Reports, where a stack-based buffer overflow occurs in the handling of data source strings within RPT files. The root cause is an overflow in processing the DataSource string, enabling remote code execution. The vulnerability is exploitable on vulnerable installa...