CVE-2008-0379

Name of the Vulnerable Software and Affected Versions Crystal Reports XI Release 2 version 11.5.0.313

Description The issue is related to a race condition in the Enterprise Tree ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code. This is achieved through the SelectedSession method, triggering a buffer overflow.

Recommendations For Crystal Reports XI Release 2 version 11.5.0.313, consider disabling the SelectedSession method as a temporary workaround until a patch is available. Restrict access to the Enterprise Tree ActiveX control to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.