Crystal Reports 'EnterpriseControls.dll' ActiveX Control Buffer Overflow Vulnerability

Crystal Reports 'EnterpriseControls.dll' ActiveX Control Buffer Overflow Vulnerability

Crystal Reports 'EnterpriseControls.dll' ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

A successful exploit will allow an attacker to crash applications using the affected ActiveX control (typically Internet Explorer).

This issue affects 'EnterpriseControls.dll' 11.5.0.313, which is contained in Crystal Reports XI Release 2; other versions may also be affected.