Vulnerability Details : CVE-2010-2590

Public exploit exists!
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.
Published 2010-12-22 03:00:03
Updated 2018-10-10 19:59:50
Source Flexera Software LLC
View at NVD,   CVE.org
Vulnerability category: OverflowExecute code

Exploit prediction scoring system (EPSS) score for CVE-2010-2590

Probability of exploitation activity in the next 30 days: 90.76%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2010-2590

  • Crystal Reports CrystalPrintControl ActiveX ServerResourceVersion Property Overflow
    Disclosure Date: 2010-12-14
    First seen: 2020-04-26
    exploit/windows/browser/crystal_reports_printcontrol
    This module exploits a heap based buffer overflow in the CrystalPrintControl ActiveX, while handling the ServerResourceVersion property. The affected control can be found in the PrintControl.dll component as included with Crystal Reports 2008. This module has been

CVSS scores for CVE-2010-2590

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
9.3
 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C
8.6
10.0
 NIST

CWE ids for CVE-2010-2590

References for CVE-2010-2590

Products affected by CVE-2010-2590

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close