Vulnerability & Exploit Database

Back to search

Crystal Reports CrystalPrintControl ActiveX ServerResourceVersion Property Overflow

This module exploits a heap based buffer overflow in the CrystalPrintControl ActiveX, while handling the ServerResourceVersion property. The affected control can be found in the PrintControl.dll component as included with Crystal Reports 2008. This module has been tested successfully on IE 6, 7 and 8 on Windows XP SP3 and IE 8 on Windows 7 SP1. The module uses the msvcr71.dll library, loaded by the affected ActiveX control, to bypass DEP and ASLR.

Free Metasploit Download

Get your copy of the world's leading penetration testing tool

 Download Now

Module Name

exploit/windows/browser/crystal_reports_printcontrol

Authors

  • Dmitriy Pletnev
  • Dr_IDE
  • juan vazquez <juan.vazquez [at] metasploit.com>

References

Targets

  • Automatic
  • IE 6 on Windows XP SP3
  • IE 7 on Windows XP SP3
  • IE 8 on Windows XP SP3
  • IE 8 on Windows 7

Platforms

  • windows

Reliability

Development

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

msf > use exploit/windows/browser/crystal_reports_printcontrol msf exploit(crystal_reports_printcontrol) > show targets ...targets... msf exploit(crystal_reports_printcontrol) > set TARGET <target-id> msf exploit(crystal_reports_printcontrol) > show options ...show and set options... msf exploit(crystal_reports_printcontrol) > exploit