Summary
This host is installed with OpenSSL and is prone to multiple vulnerabilities.
Impact
Has unspecified impact and context-dependent attack vectors.
Impact Level: Application
Solution
Upgrade to version 0.9.8m or later.
For updates refer tohttp://www.slproweb.com/products/Win32OpenSSL.html
Insight
Multiple flaws are due to error in 'bn_wexpand()' function which does not check for a NULL return value when called in 'crypto/bn/bn_div.c', 'crypto/bn/bn_gf2m.c', 'crypto/ec/ec2_smpl.c', and 'engines/e_ubsec.c'.
Affected
OpenSSL version prior to 0.9.8m on Windows.
References
Severity
Classification
-
CVE CVE-2009-3245 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- 7T Interactive Graphical SCADA System Multiple Security Vulnerabilities
- Adobe Flash Player Buffer Overflow Vulnerability - Apr14 (Windows)
- Adobe Air Multiple Vulnerabilities June-2012 (Windows)
- Adobe Acrobat Multiple Unspecified Vulnerabilities - Windows
- Adobe AIR Multiple Vulnerabilities -01 Feb13 (Windows)