- Search
- Downloads
- Service Packs
- Critical Updates
- Critical Hot Fixes
- Monthly Hot Fixes
- EWS Directories
- Mail Direction
- SSN File
- Unlock Codes
- Runtime Packages
- Samples
- Electronic Software Delivery*
- Documentation
- Forums
- Support by Product
- Case Management
- Support Programs & Lifecycle
- Registration
- Customer Service
- My Support*
- Contact Support
- Support Site Help
- Diamond Community
* Login Required
Critical Updates are intended to fix potential security risks in Business Objects Crystal products and SDKs. These updates are highly recommended to ensure the security of Crystal products.
Unless otherwise indicated, these updates apply to all languages.
For information on securing web applications using Crystal products or their Web API, refer to our best practices whitepaper (PDF - 55KB).
Note: If you are using an OEM (original equipment manufacturer) version of any of the Crystal products listed below, contact your OEM provider before downloading and installing any of these updates. To determine if you are using an OEM version, refer to this page.
Critical Update issues:
Last updated: December 23, 2006
Critical Updates contain fixes addressed in specific Knowledge Base articles or Business Objects Security Bulletins. Listed below are the Security Bulletins and Knowledge Base articles that apply to the updates on this page:
- Knowledge Base 1410607 - Error: "buffer overrun...", designer infinitely loops or exits suddenly opening RPT file, Error:"failing to read data from report file...ReportAdd" publishing RPT file to Enterprise 10/XI/XI Release 2 (December 26, 2006)
- Knowledge Base 1141499 - Crystal Enterprise 9 and 10 session identifier vulnerability (December 21, 2006)
- Knowledge Base c2017748 and Security Bulletin - Report Application Server can be made to stop servicing legitimate requests (June 27, 2005)
- Knowledge Base c2016559 - URL to a RPT file may expose client-side source information with a script tag (December 24, 2004)
- Knowledge Base c2016715 - URL containing parameter with a script tag may expose client-side source information (December 24, 2004)
- Knowledge Base c2016538 - Buffer overrun vulnerability when processing JPEG images in Crystal products (October 6, 2004)
- Security Bulletin - Vulnerability in Crystal Reports Web Viewers could allow Information Disclosure and Denial of Service (June 8, 2004)
Critical Updates are available for these Crystal products:
Crystal Reports for Visual Studio .NET 2003
Crystal Enterprise 8.5 (including Java SDK)
Crystal Enterprise RAS 8.5 for Unix
Microsoft Business Solutions CRM 1.2
Crystal Reports for Borland J Builder
Crystal Reports for BEA WebLogic Workshop 8.1
Crystal Reports for Borland C# Builder
BusinessObjects XI
December 23, 2006 - commonXIwin_chf.zip (Windows) - ZIP
For more information, refer to knowledge base article 1141499.
Crystal Reports 10
Run the enclosed EXE file on all computers with the Crystal Reports designer. The following updates apply to all languages.
October 6, 2004 - v10_gdiplus_critical_update.zip (Windows) - ZIP 5MB
October 6, 2004 - ActiveXViewer_gdiplus_critical_update.zip (Windows) - ZIP 2MB
Note: ActiveXViewer_gdiplus_critical_update.zip is only required for runtime environments using the ActiveX viewer. For more information, refer to Knowledge Base article c2016538.
June 8, 2004 - v10_critical_update_win.zip (Windows) - ZIP 49MB
Crystal Enterprise 10
Run the enclosed EXE or script file on all computers with Crystal Enterprise components.
December 21, 2006 - ce10win_en.zip.
For more information, refer to knowledge base article 1141499.
December 24, 2004
Windows
v10_critical_update_win.zip - ZIP 52 MB
(applies to English, French, German, and Japanese languages)
Solaris
ce10critical_update_sol_en.tar.gz (English) - tar.gz 62 MB
ce10critical_update_sol_fr.tar.gz (French) - tar.gz 62 MB
ce10critical_update_sol_de.tar.gz (German) - tar.gz 62 MB
ce10critical_update_sol_jp.tar.gz (Japanese) - tar.gz 62 MB
AIX
ce10critical_update_aix_en.tar.gz (English) - tar.gz 62 MB
ce10critical_update_aix_fr.tar.gz (French) - tar.gz 62 MB
ce10critical_update_aix_de.tar.gz (German) - tar.gz 62 MB
ce10critical_update_aix_jp.tar.gz (Japanese) - tar.gz 62 MB
HP-UX
ce10critical_update_hp_en.tar.gz (English) - tar.gz 2 MB
ce10critical_update_hp_fr.tar.gz (French) - tar.gz 2 MB
ce10critical_update_hp_de.tar.gz (German) - tar.gz 2 MB
ce10critical_update_hp_jp.tar.gz (Japanese) - tar.gz 2 MB
Linux
ce10critical_update_lin_en.tar.gz (English) - tar.gz 1 MB
ce10critical_update_lin_fr.tar.gz (French) - tar.gz 1 MB
ce10critical_update_lin_de.tar.gz (German) - tar.gz 1 MB
ce10critical_update_lin_jp.tar.gz (Japanese) - tar.gz 1 MB
October 6, 2004
The following updates apply to all languages and are for Windows only.
v10_gdiplus_critical_update.zip (Windows) - ZIP 5MB
ActiveXViewer_gdiplus_critical_update.zip (Windows) - ZIP 2 MB
Note: ActiveXViewer_gdiplus_critical_update.zip is only required for runtime environments using the ActiveX viewer. For more information, refer to Knowledge Base article c2016538.
June 8, 2004
The following updates apply to all languages
Note: The Windows download is identical to the December 24, 2004 update and only needs to be applied once.
v10_critical_update_win.zip (Windows) - ZIP 52 MB
ce10critical_update_sol.tar.gz (Solaris) - - tar.gz 60 MB
ce10critical_update_aix.tar.gz (AIX) - tar.gz 60 MB
Crystal Reports 9
Run the enclosed EXE file on all computers with the Crystal Reports designer. The following updates apply to all languages.
October 6, 2004 - v9_gdiplus_critical_update.zip (Windows) - ZIP 2 MB
June 8, 2004 - v9_critical_update_win.zip (Windows) - ZIP 17 MB
Crystal Enterprise 9
Run the enclosed EXE file on all computers with Crystal Enterprise components. The following updates apply to all languages.
December 21, 2006 - Refer to knowledge base article - 1141499
Crystal Enterprise 9 is an end-of-life product with no patch support and Business Objects recommends that users upgrade to Crystal Enterprise 10 and apply the hot fix.
December 24, 2004 - v9_critical_update_win.zip (Windows) - ZIP 20 MB
October 6, 2004 - v9_gdiplus_critical_update.zip (Windows) - ZIP 2 MB
June 8, 2004 - v9_critical_update_win.zip (Windows) - ZIP 20 MB
Note: The June 8, 2004 download is identical to the December 24, 2004 update and only needs to be applied once.
Crystal Reports for Visual Studio .NET 2003
June 8, 2004 - Refer to our Critical Updates for Microsoft Bundles page for this update.
Crystal Enterprise 8.5 (including Java SDK)
Run the enclosed EXE or script file on all computers with Crystal Enterprise 8.5 components.
December 24, 2004
Windows
v85_critical_update_win.zip - ZIP 9 MB
(applies to English, French, German, and Japanese languages)
Solaris
ce85critical_update_sol_en.tar.gz (English) - tar.gz 1 MB
ce85critical_update_sol_fr.tar.gz (French) - tar.gz 1 MB
ce85critical_update_sol_de.tar.gz (German) - tar.gz 1 MB
ce85critical_update_sol_jp.tar.gz (Japanese) - tar.gz 1 MB
AIX
ce85critical_update_aix_en.tar.gz (English) - tar.gz 2 MB
ce85critical_update_aix_fr.tar.gz (French) - tar.gz 2 MB
ce85critical_update_aix_de.tar.gz (German) - tar.gz 2 MB
ce85critical_update_aix_jp.tar.gz (Japanese) - tar.gz 2 MB
June 8, 2004
The following updates apply to all languages
Note: The Windows download is identical to the December 24, 2004 update and only needs to be applied once.
v85_critical_update_win.zip (Windows) - ZIP 9 MB
ce85critical_update_jcesol.tar.gz (Solaris) - tar.gz 5 MB
ce85critical_update_jceaix.tar.gz (AIX) - tar.gz 5 MB
Crystal Enterprise RAS 8.5 for Unix
June 8, 2004 - ras85critical_update_sol.tar.gz (Solaris) - tar.gz 5 MB
Microsoft Business Solutions CRM 1.2
June 8, 2004 - Refer to our Critical Updates for Microsoft Bundles page for this update.
Crystal Reports for Borland J Builder
June 8, 2004 - cr10jbuilder_critical_update_win.zip (Windows) - ZIP 1 MB
June 8, 2004 - crjbuilder10critical_update_sol.tar.gz (Solaris) - tar.gz 0.5 MB
June 8, 2004 - crjbuilder10critical_update_lnx.tar.gz (Linux) - tar.gz 0.5 MB
Crystal Reports for BEA WebLogic Workshop 8.1
June 8, 2004 - bea81_critical_update_win.zip (Windows) - ZIP 0.5 MB
June 8, 2004 - bea81_critical_update_unix.tar.gz (Unix, Linux) - tar.gz 0.5 MB
Crystal Reports for Borland C# Builder
June 8, 2004 - bcsharp_critical_update_win.zip (Windows) - ZIP 1.5 MB
