CVE-2006-6133: Buffer Overflow
First published: Tue Nov 28 2006(Updated: )
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Crystal Reports XI | ||
| Microsoft Visual Studio | =2002 | |
| Microsoft Visual Studio | =2002-sp1 | |
| Microsoft Visual Studio | =2003 | |
| Microsoft Visual Studio | =2003-sp1 | |
| Microsoft Visual Studio | =2005 | |
| Microsoft Visual Studio | =2005-sp1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1017279
- http://secunia.com/advisories/23091
- http://www.securityfocus.com/bid/21261
- http://www.lssec.com/advisories/LS-20061102.pdf
- http://www.us-cert.gov/cas/techalerts/TA07-254A.html
- http://secunia.com/advisories/26754
- http://www.vupen.com/english/advisories/2007/3114
- http://www.vupen.com/english/advisories/2006/4691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30532
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2055
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-052
- http://www.securityfocus.com/archive/1/452464/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-6133?
CVE-2006-6133 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2006-6133?
To fix CVE-2006-6133, update to the latest version of Crystal Reports or apply any available patches for the affected Microsoft Visual Studio .NET versions.
What software is affected by CVE-2006-6133?
CVE-2006-6133 affects Crystal Reports XI Professional and several versions of Microsoft Visual Studio .NET from 2002 to 2005.
What type of vulnerability is CVE-2006-6133?
CVE-2006-6133 is a stack-based buffer overflow vulnerability.
Can CVE-2006-6133 be exploited remotely?
Yes, CVE-2006-6133 can be exploited remotely by user-assisted attackers.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/businessobjects
- canonical/sap crystal reports xi
- vendor/microsoft
- canonical/microsoft visual studio
- version/microsoft visual studio/2002
- version/microsoft visual studio/2002-sp1
- version/microsoft visual studio/2003
- version/microsoft visual studio/2003-sp1
- version/microsoft visual studio/2005
- version/microsoft visual studio/2005-sp1