SUSE CVE-2010-0742

The Cryptographic Message Syntax CMS implementation in crypto/cms/cmsasn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, a...

OpenSSL CMS Structure OriginatorInfo Memory Corruption (CVE-2010-0742)

OpenSSL is an open-source library that implements Secure Sockets Layer SSL and Transport Layer Security TLS protocol functionality. OpenSSL contains an implementation of CMS. A memory corruption vulnerability has been reported in OpenSSL library. The vulnerability is due to an error in handling C...

DEBIAN-CVE-2010-0742

The Cryptographic Message Syntax CMS implementation in crypto/cms/cmsasn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, a...

CVE-2010-0742

The Cryptographic Message Syntax CMS implementation in crypto/cms/cmsasn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, a...

OpenSSL Cryptographic Message Syntax "OriginatorInfo" Vulnerability

No description provided by source. OpenSSL Security Advisory 01-Jun-2010 Two security flaws have been fixed in OpenSSL 0.9.8o and OpenSSL 1.0.0a. Invalid ASN1 module definition for CMS. ======================================= CMS structures containing OriginatorInfo are mishandled this can write ...

OpenSSL < 0.9.8o / 1.0.0a Multiple Vulnerabilities

Binary data 5559.prm...

OpenSSL < 0.9.8o / 1.0.0a Multiple Vulnerabilities

Binary data 801057.prm...

Vulnerability in OpenSSL CVE-2010-0742

A flaw in the handling of CMS structures containing OriginatorInfo was found which could lead to a write to invalid memory address or double free. CMS support is disabled by default in OpenSSL 0.9.8 versions. Found by Ronald Moesbergen...