CVE Feed

    Dashboard / CVE / CVE-2010-2590

    CVE-2010-2590

    Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.

    Published:Dec 22, 2010
    Last Modified:Apr 11, 2025
    EPS:Dec 22, 2010
    EPSS Score:0.78972
    CVSS Score:9.3

    Affected Products

    Vendor
    Sap
    Product
    Crystal Reports

    Exploits

    http://pocoftheday.blogspot.com/2010/12/crystal-reports-viewer-1200549-activex.htmlhttp://www.exploit-db.com/exploits/15733http://www.securityfocus.com/bid/45387http://pocoftheday.blogspot.com/2010/12/crystal-reports-viewer-1200549-activex.htmlhttp://www.exploit-db.com/exploits/15733http://www.securityfocus.com/bid/45387https://www.exploit-db.com/exploits/23472https://www.exploit-db.com/exploits/15733

    Related CVEs

    CVE-2020-6208 (CVSS 8.2) — SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker …
    CVE-2019-0285 (CVSS 9.8) — The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensiti…
    CVE-2018-2427 (CVSS 8.8) — SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for …
    CVE-2014-5506 (CVSS 6.8) — Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted…
    CVE-2014-5505 (CVSS 6.8) — Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a cra…
    CVE-2010-3032 (CVSS 10) — Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Cryst…

    References

    http://pocoftheday.blogspot.com/2010/12/crystal-reports-viewer-1200549-activex.html
    http://secunia.com/advisories/42305
    http://secunia.com/secunia_research/2010-135/
    http://www.exploit-db.com/exploits/15733
    http://www.osvdb.org/69917
    http://www.securityfocus.com/archive/1/515369/100/0/threaded
    http://www.securityfocus.com/bid/45387
    http://www.securitytracker.com/id?1024915
    https://service.sap.com/sap/support/notes/1539269
    http://pocoftheday.blogspot.com/2010/12/crystal-reports-viewer-1200549-activex.html
    http://secunia.com/advisories/42305
    http://secunia.com/secunia_research/2010-135/
    http://www.exploit-db.com/exploits/15733
    http://www.osvdb.org/69917
    http://www.securityfocus.com/archive/1/515369/100/0/threaded
    http://www.securityfocus.com/bid/45387
    http://www.securitytracker.com/id?1024915
    https://service.sap.com/sap/support/notes/1539269

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High