← Database

CVE-2008-0379

CRITICAL CVSS: 9.3 Published: 2008-01-22 Modified: 2026-06-16

Description

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.

Affected Platforms

Businessobjects Crystal Reports Xi

Weakness Type

CWE-120, CWE-362

References