We are using SAP Crystal Reports, developer version for Microsoft Visual Studio: Updates & Runtime Downloads - Support Pack 9 (v. 13.0.9.1312)
There was vulnerability which reported in SAP Crystal Reports version 2011 -SAP Crystal Reports - Two Buffer Overflow Vulnerabilities in BI-RA-CR - 1999142.
Is it fixed in support Pack 9 (v. 13.0.9.1312) ?