CVE-2008-0379

no score yetEPSS 8.6%

Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SelectedSession method, which triggers a buffer overflow.

EPSS: 8.6% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWEs: CWE-120, CWE-362
Published: 2008-01-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

businessobjects:crystal_reports_xi

References

http://www.securityfocus.com/bid/27333
http://www.securitytracker.com/id?1019239
https://exchange.xforce.ibmcloud.com/vulnerabilities/39743
https://www.exploit-db.com/exploits/4931
http://www.securityfocus.com/bid/27333

Check your stack JSON