CVE-2003-0818

Name of the Vulnerable Software and Affected Versions Windows NT 4.0 Windows 2000 Windows XP

Description The issue is related to multiple integer overflows in the Microsoft ASN.1 library, which can be exploited by remote attackers to execute arbitrary code. This is achieved through ASN.1 BER encodings with very large length fields, causing arbitrary heap data to be overwritten, or through modified bit strings.

Recommendations For Windows NT 4.0, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library. For Windows 2000, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library. For Windows XP, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library.