CVE-2010-3032
Last modified
CVE-2010-3032 is a vulnerability of currently unknown severity. Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer overflow.. EPSS estimates a 6.43% chance of exploitation in the next 30 days.
Description
Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer overflow.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Crystal Reports | 2008 |
References
- http://secunia.com/advisories/40960Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2074Vendor Advisory
- http://secunia.com/advisories/40960Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2074Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-3032?
How severe is CVE-2010-3032?
How do I fix CVE-2010-3032?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-3026Cross-site request forgery (CSRF) vulnerability in applicati…
- CVE-2010-3027SQL injection vulnerability in index.php in Tycoon Baseball …
- CVE-2010-3028The Aardvertiser component before 2.2.1 for Joomla! uses ins…
- CVE-2010-3029SQL injection vulnerability in statistics.php in PHPKick 0.8…
- CVE-2010-3030Cross-site request forgery (CSRF) vulnerability in Tomaz Mur…
- CVE-2010-3031Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly oth…
- CVE-2010-3033Cisco Wireless LAN Controller (WLC) software, possibly 4.2 t…
- CVE-2010-3034Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x…
- CVE-2010-3035Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does …7.5
- CVE-2010-3036Multiple buffer overflows in the authentication functionalit…
- CVE-2010-3037goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconf…
- CVE-2010-3038Cisco Unified Videoconferencing (UVC) System 5110 and 5115, …
Are you affected by CVE-2010-3032?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST