CVE-2010-2590
SAP Crystal Reports 2008 SP3 Fix Pack 3.2 - Remote Code Execution via Long ServerResourceVersion Property
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-2590.
PoCs published by Metasploit, Dr_IDE, Dmitriy Pletnev, Dr_IDE, juan vazquez, including Metasploit module exploits/windows/browser/crystal_reports_printcontrol.
AI-analyzed exploit summary This Metasploit module exploits a heap-based buffer overflow in Crystal Reports' CrystalPrintControl ActiveX via the ServerResourceVersion property, achieving remote code execution on vulnerable systems. It uses ROP techniques to bypass DEP/ASLR and targets IE 6-8 on Windows XP/7.
Description
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.
Exploits (3)
This Metasploit module exploits a heap-based buffer overflow in Crystal Reports' CrystalPrintControl ActiveX via the ServerResourceVersion property, achieving remote code execution on vulnerable systems. It uses ROP techniques to bypass DEP/ASLR and targets IE 6-8 on Windows XP/7.
This exploit targets a buffer overflow vulnerability in Crystal Reports Viewer 12.0.0.549 ActiveX control (PrintControl.dll) via the ServerResourceVersion method. It uses a heap spray technique to achieve remote code execution, specifically launching calc.exe as a payload.
This Metasploit module exploits a heap-based buffer overflow in Crystal Reports' CrystalPrintControl ActiveX via the ServerResourceVersion property. It uses ROP chains and heap spraying to achieve remote code execution on vulnerable systems.