06.161.2004 - MS04-017: Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689)

A directory traversal vulnerability exists in Crystal Reports and Crystal Enterprise from Business Objects that could allow Information Disclosure and Denial of Service attacks on an affected system. An attacker who successfully exploited the vulnerability could retrieve and delete files through the Crystal Reports and Crystal Enterprise Web interface on an affected system. - Download Visual Studio .NET 2003 - Download Outlook 2003 with Business Contact Manager - Download Microsoft Business Solutions CRM 1.2 - View Microsoft Security Bulletin MS04-017 - View Microsoft Knowledge Base Article - 842689 - Visit Microsoft Corporation