CVE

Id
13141  
CVE No.
CVE-2005-1935  
Status
Candidate  
Description
Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818. NOTE: the researcher has claimed that MS:MS04-007 fixes this issue.  
Phase
Assigned (20050609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
94714 13141 CVE-2005-1935 MISC:http://www.phreedom.org/solar/exploits/msasn1-bitstring/  View
94715 13141 CVE-2005-1935 XF:asn1-constructed-heap-overflow(20870)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62225 JVNDB-2005-000427 Mozilla Firefox の複数のフレームドメインの処理における Web コンテンツを偽装する脆弱性 ------------ CVE-2005-1937 13141 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000427.html  View