CVE-2010-3032: Buffer Overflow

Published Aug 17, 2010

Updated

Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer overflow.

Affected Software

1 affected component

SAP Crystal Reports=2008

Event History

Aug 17, 2010

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3032?

CVE-2010-3032 has a medium severity level due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2010-3032?

To fix CVE-2010-3032, upgrade to a patched version of SAP Crystal Reports that addresses this vulnerability.

What type of attack is possible with CVE-2010-3032?

CVE-2010-3032 can be exploited by remote attackers to cause a denial of service or potentially execute arbitrary code.

Which version of SAP Crystal Reports is affected by CVE-2010-3032?

CVE-2010-3032 specifically affects SAP Crystal Reports version 2008.

What component of SAP Crystal Reports is involved in CVE-2010-3032?

CVE-2010-3032 involves the ebus-3-3-2-6.dll module within SAP Crystal Reports.