CyberSec.Space Logo
CVEブラウザに戻る

CVE-2004-2645

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0950%
EPSS Percentile44.24th
Published2004年12月31日
Last Modified2026年4月16日

Vulnerability Description

Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures."

Affected Platforms (CPE)

📦
Asn.1 Compiler

Asn.1 Compiler

= 0.9.4
📦
Asn.1 Compiler

Asn.1 Compiler

= 0.9.5
📦
Asn.1 Compiler

Asn.1 Compiler

= 0.9.6

References & Advisories

🔗 http://secunia.com/advisories/12794
🔗 http://securitytracker.com/id?1011622
🔗 http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592
🔗 http://www.osvdb.org/10684
🔗 http://www.securityfocus.com/bid/11370
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/17696
🔗 http://secunia.com/advisories/12794
🔗 http://securitytracker.com/id?1011622

関連する脆弱性情報

CVE-2004-08495.0

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when c...

CVE-2004-129010.0

Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a...

CVE-2004-041810.0

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow ...

CVE-2004-105010.0

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME a...