CVE-2014-5506 Use after free in n/a

What is CVE-2014-5506?

CVE-2014-5506 is a medium-severity use after free vulnerability in n/a, published on 4 Sep 2014. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file.

Which versions are affected by CVE-2014-5506?

It affects 1 product.

Products include Sap Crystal Reports.

How do I fix CVE-2014-5506?

No fix has been published for CVE-2014-5506 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2014-5506 being exploited?

There is no known exploitation of CVE-2014-5506 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2010-3032 Integer overflow in n/a Critical 10.0
• CVE-2019-0285 Information disclosure in SAP Crystal Reports for Visual Studio Critical 9.8
• CVE-2010-2590 Memory corruption in n/a Critical 9.3
• CVE-2020-6208 Use after free in SAP Business Objects Business Intelligence Platform (Crystal Reports) High 7.5
• CVE-2014-5505 Memory corruption in n/a Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pqjh-69h3-r8f2.