Vulnerability Details : CVE-2006-6133
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2006-6133
Probability of exploitation activity in the next 30 days: 95.36%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-6133
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.6
|
HIGH | AV:N/AC:H/Au:N/C:C/I:C/A:C |
4.9
|
10.0
|
NIST |
CWE ids for CVE-2006-6133
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2006-6133
-
http://www.securityfocus.com/archive/1/452464/100/0/threaded
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2055
-
http://www.vupen.com/english/advisories/2007/3114
Vendor Advisory
-
http://securitytracker.com/id?1017279
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-052
-
http://www.securityfocus.com/bid/21261
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/30532
-
http://www.us-cert.gov/cas/techalerts/TA07-254A.html
US Government Resource
-
http://www.vupen.com/english/advisories/2006/4691
Vendor Advisory
-
http://www.lssec.com/advisories/LS-20061102.pdf
Products affected by CVE-2006-6133
- cpe:2.3:a:microsoft:visual_studio_.net:2005:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio_.net:2005:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio_.net:2002:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio_.net:2002:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio_.net:2003:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*
- cpe:2.3:a:businessobjects:crystal_reports_xi:*:*:professional:*:*:*:*:*