Description

The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.

Remediation

References

CVE-2010-0742

Related Vulnerabilities

Jboss EAP Improper Authentication Vulnerability (CVE-2011-4085)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5096)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3595)

WordPress Plugin MiwoFTP-File & Folder Manager Multiple Vulnerabilities (1.0.5)

WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Cross-Site Scripting (3.1.2)

Severity

High

Classification

CVE-2010-0742

Tags

Missing Update Known Vulnerabilities