Unscored CVE-2014-5506 EUVD-2014-5393GHSA-pqjh-69h3-r8f2

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in …

Published Sep 4, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file.

References

https://service.sap.com/sap/support/notes/1999142
http://www.zerodayinitiative.com/advisories/ZDI-14-302/
http://scn.sap.com/docs/DOC-8218
69557 vdb-entry
61016 third-party-advisory