PT-2004-1167
CVE-2003-0818
·
تاريخ النشر
2004-02-11
·
تاريخ التحديث
2019-04-30
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Windows NT 4.0
Windows 2000
Windows XP
Description
The issue is related to multiple integer overflows in the Microsoft ASN.1 library, which can be exploited by remote attackers to execute arbitrary code. This is achieved through ASN.1 BER encodings with very large length fields, causing arbitrary heap data to be overwritten, or through modified bit strings.
Recommendations
For Windows NT 4.0, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library.
For Windows 2000, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library.
For Windows XP, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾