CVE-2014-5506

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
sapcrystal_reports
-
𝑥
= Vulnerable software versions
References
http://scn.sap.com/docs/DOC-8218
http://secunia.com/advisories/61016
http://www.securityfocus.com/bid/69557
http://www.zerodayinitiative.com/advisories/ZDI-14-302/
https://service.sap.com/sap/support/notes/1999142
http://scn.sap.com/docs/DOC-8218
http://secunia.com/advisories/61016
http://www.securityfocus.com/bid/69557
http://www.zerodayinitiative.com/advisories/ZDI-14-302/
https://service.sap.com/sap/support/notes/1999142