7.6
CVE-2006-6133
- EPSS 72.54%
- Published 28.11.2006 01:07:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
Data is provided by the National Vulnerability Database (NVD)
Businessobjects ≫ Crystal Reports Xi Editionprofessional
Microsoft ≫ Visual Studio .Net Version2002
Microsoft ≫ Visual Studio .Net Version2002 Updatesp1
Microsoft ≫ Visual Studio .Net Version2003
Microsoft ≫ Visual Studio .Net Version2003 Updatesp1
Microsoft ≫ Visual Studio .Net Version2005
Microsoft ≫ Visual Studio .Net Version2005 Updatesp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 72.54% | 0.987 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.6 | 4.9 | 10 |
AV:N/AC:H/Au:N/C:C/I:C/A:C
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.