CVE-2010-2590

CRITICAL 9.3CVE-2010-2590 · Published 22/12/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
crystal reports sap	`= 2008`	No fix yet

Description

Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.

References

pocoftheday.blogspot.com/2010/12/crystal-reports-viewer-1200549-activex.html · Exploit
secunia.com/advisories/42305 · Vendor Advisory
secunia.com/secunia_research/2010-135 · Vendor Advisory
exploit-db.com/exploits/15733 · Exploit
osvdb.org/69917
securityfocus.com/archive/1/515369/100/0/threaded
securityfocus.com/bid/45387 · Exploit
securitytracker.com/id
service.sap.com/sap/support/notes/1539269

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free