PT-2004-3535 · None · Asn1C

Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2645

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions asn1c versions prior to 0.9.7

Description The issue concerns an unspecified vulnerability in the processing of CHOICE types with indefinite length structures.

Recommendations For versions prior to 0.9.7, update to version 0.9.7 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-2645

Affected Products

Asn1C

References · 7

• http://securitytracker.com/id?1011622 · Patch
• http://osvdb.org/10684 · Patch
• http://secunia.com/advisories/12794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2645 · Security Note
• http://securityfocus.com/bid/11370 · Patch
• http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17696 · Note