Hi Don,
We are currently using SAP Crystal Reports, developer version for Microsoft Visual Studio: Updates & Runtime Downloads - Support Pack 9 (v. 13.0.9.1312).
I just wanted to confirm with your team , whether the Two Buffer Overflow Vulnerabilities fixed in Support Pack 9 (v. 13.0.9.1312) or not?