8 matches found
SUSE CVE-2010-0742
The Cryptographic Message Syntax CMS implementation in crypto/cms/cmsasn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, a...
OpenSSL CMS Structure OriginatorInfo Memory Corruption (CVE-2010-0742)
OpenSSL is an open-source library that implements Secure Sockets Layer SSL and Transport Layer Security TLS protocol functionality. OpenSSL contains an implementation of CMS. A memory corruption vulnerability has been reported in OpenSSL library. The vulnerability is due to an error in handling C...
DEBIAN-CVE-2010-0742
The Cryptographic Message Syntax CMS implementation in crypto/cms/cmsasn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, a...
CVE-2010-0742
The Cryptographic Message Syntax CMS implementation in crypto/cms/cmsasn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, a...
OpenSSL Cryptographic Message Syntax "OriginatorInfo" Vulnerability
No description provided by source. OpenSSL Security Advisory 01-Jun-2010 Two security flaws have been fixed in OpenSSL 0.9.8o and OpenSSL 1.0.0a. Invalid ASN1 module definition for CMS. ======================================= CMS structures containing OriginatorInfo are mishandled this can write ...
OpenSSL < 0.9.8o / 1.0.0a Multiple Vulnerabilities
Binary data 5559.prm...
OpenSSL < 0.9.8o / 1.0.0a Multiple Vulnerabilities
Binary data 801057.prm...
Vulnerability in OpenSSL CVE-2010-0742
A flaw in the handling of CMS structures containing OriginatorInfo was found which could lead to a write to invalid memory address or double free. CMS support is disabled by default in OpenSSL 0.9.8 versions...