CVE-2006-6133

HIGH 7.6CVE-2006-6133 · Published 28/11/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
visual studio .net microsoft	`= 2002= 2003= 2005`	No fix yet

Description

Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.

References

secunia.com/advisories/23091 · Vendor Advisory
secunia.com/advisories/26754 · Vendor Advisory
securitytracker.com/id
lssec.com/advisories/LS-20061102.pdf
securityfocus.com/archive/1/452464/100/0/threaded
securityfocus.com/bid/21261
us-cert.gov/cas/techalerts/TA07-254A.html · US Government Resource
vupen.com/english/advisories/2006/4691 · Vendor Advisory
vupen.com/english/advisories/2007/3114 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-052
exchange.xforce.ibmcloud.com/vulnerabilities/30532
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2055

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free