CVE-2005-4813: Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Busi...

Security readout for executives and security teams

This is a remote denial-of-service issue in older Business Objects Crystal reporting components. An attacker sending certain network traffic could make the Report Application Server hang, disrupting report generation or dependent business applications. The source bundle does not show data theft, code execution, or confirmed active exploitation. Exposure is most likely where legacy Crystal Reports XI, Crystal Reports Server XI, or BusinessObjects Enterprise XI remains in service with Crystalras.exe older than 11.0.0.1370 and reachable from untrusted networks or broad internal segments. Treat as a legacy availability risk. Prioritize if Crystal reporting supports customer operations, finance, compliance, or executive reporting, especially if the service is externally reachable or broadly reachable inside the network. Mitigation focus: Upgrade Crystalras.exe to 11.0.0.1370 or later where supported.; Review Business Objects security bulletin and knowledge base guidance.; Restrict network access to Report Application Server from untrusted segments..

Prepared

Jun 29, 2026, 10:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.