CVE-2006-6133

published 2006-11-28

CVE-2006-6133: Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1…

Priority P3 51 high 7.6 CVSS 2.0

AV N AC H Au N C C I C A C

EXPLOIT

Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	visual_studio_net	—	—
microsoft	visual_studio_net	—	—
microsoft	visual_studio_net	—	—

Detection & IOCs extracted from sources · hover to see the quote

url https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/29171.rpt↗

filename 29171.rpt↗

• → Trigger vector is a user-assisted file open of a crafted RPT file; monitor for suspicious .rpt file opens in Crystal Reports / Visual Studio environments, especially from untrusted or remote sources. ↗
• → Exploitation results in a stack-based buffer overflow; look for abnormal stack pivot or shellcode execution originating from Crystal Reports processes (e.g., crw32.exe, crystalreportviewers) after opening an RPT document. ↗
• → Failed exploit attempts manifest as application crashes (denial-of-service); alert on unexpected termination of Crystal Reports processes after RPT file parsing. ↗

• · Exploitation requires user interaction — the victim must be enticed into opening the malicious RPT file; purely network-based or zero-click exploitation is not indicated. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119