[Full-disclosure] LS-20061102 - Business Objects Crystal Reports Stack Overflow Vulnerability

advisories at lssec.com advisories at lssec.com
Thu Nov 23 17:37:20 GMT 2006


LS-20061102

LSsec has discovered a vulnerability in
Business Objects Crystal Reports XI Professional,
which could be exploited by an attacker in order
to execute arbitrary code on an affected system.

Exploitation requires that the attacker coerce
the target user into opening a malicious .RPT file.

For technical details please visit:

	http://www.lssec.com/charity.html
	
LSsecurity - LSsec.com






Full-Disclosure is hosted and sponsored by Secunia.