Description
Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file.
References
- 60877 third-party-advisory
- sap-crystal-cve20145505-bo(95740) vdb-entry
- https://service.sap.com/sap/support/notes/1999142
- http://www.zerodayinitiative.com/advisories/ZDI-14-301/
- 69558 vdb-entry
- http://scn.sap.com/docs/DOC-8218