Description

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

Remediation

References

CVE-2009-0590

Related Vulnerabilities

WordPress Plugin WordPress Download Manager Multiple Vulnerabilities (2.8.7)

Oracle Database Server CVE-2007-5512 Vulnerability (CVE-2007-5512)

phpBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5173)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38263)

YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3785)

Severity

Medium

Classification

CVE-2009-0590 CWE-119

Tags

Missing Update Known Vulnerabilities