Crystal Reports XI

DATE	CVE	VULNERABILITY TITLE	RISK
2006-11-28	CVE-2006-6133	Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file. network high complexity businessobjects microsoft CWE-119	7.6
2005-12-31	CVE-2005-4813	Denial Of Service vulnerability in Business Objects Enterprise/Crystal Reports Server Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and BusinessObjects Enterprise XI, allows remote attackers to cause a denial of service (application hang) via certain network traffic, possibly involving multiple simultaneous TCP connections. network low complexity businessobjects	5.0