Login Request a demo
Unscored severity · published Sep 4, 2014
CVE-2014-5506
Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file
–
CVSS
3.1%
EPSS
No
On KEV
Description
Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Crystal Reports · Sap
All versions, or not specified · source: NVD
Affected product
CR
Crystal Reports
Sap
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-5506
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-5506
scn.sap.com
http://scn.sap.com/docs/DOC-8218
secunia.com
http://secunia.com/advisories/61016
www.securityfocus.com
http://www.securityfocus.com/bid/69557
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-14-302/
service.sap.com
https://service.sap.com/sap/support/notes/1999142
More from Crystal Reports
9.8
CVE-2019-0285
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by…
8.8
CVE-2018-2427
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code…
8.2
CVE-2020-6208
SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the…
–
CVE-2014-5505
Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file
–
CVE-2010-2590
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote…