[security-alerts] FW: [SA26754] Visual Studio Crystal Reports RPT Processing Buffer Overflow

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> ----------------------------------------------------------------------
>
> TITLE:
> Visual Studio Crystal Reports RPT Processing Buffer Overflow
>
> SECUNIA ADVISORY ID:
> SA26754
>
> VERIFY ADVISORY:
> http://secunia.com/advisories/26754/
>
> CRITICAL:
> Moderately critical
>
> IMPACT:
> System access
>
> WHERE:
> From remote
>
> SOFTWARE:
> Microsoft Visual Studio .NET 2002
> http://secunia.com/product/1087/
> Microsoft Visual Studio .NET 2003
> http://secunia.com/product/1086/
> Microsoft Visual Studio 2005
> http://secunia.com/product/6779/
>
> DESCRIPTION:
> A vulnerability has been reported in Visual Studio, which can be
> exploited by malicious people to compromise a user's system.
>
> For more information:
> SA23091
>
> NOTE: Not all editions of Visual Studio 2002, 2003, and 2005 are
> affected. Please see the Microsoft security bulletin for details.
>
> SOLUTION:
> Apply patches.
>
> Visual Studio .NET 2002 Service Pack 1:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=2608C
> 83B-E1B2-4449-9A0E-1E566AAC3D76
>
> Visual Studio .NET 2003:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=D612A
> D41-5A0D-4E13-99EA-D6A5589786D6
>
> Visual Studio .NET 2003 Service Pack 1:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=0B10B
> 04B-932C-4BFF-9CBC-B3EEB15064B1
>
> Visual Studio 2005:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=21073
> CC2-919C-40DF-8EBB-AA3DB06050D2
>
> Visual Studio 2005 Service Pack 1:
> http://www.microsoft.com/downloads/details.aspx?FamilyId=967D4
> 3C8-EFBA-4221-BEB0-981E7DEEF33A
>
> PROVIDED AND/OR DISCOVERED BY:
> LSsecurity
>
> ORIGINAL ADVISORY:
> MS07-052 (KB941522):
> http://www.microsoft.com/technet/security/Bulletin/MS07-052.mspx
>
> OTHER REFERENCES:
> SA23091:
> http://secunia.com/advisories/23091
>
>