CVE

Id
91899  
CVE No.
CVE-2016-5080  
Status
Candidate  
Description
Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.  
Phase
Assigned (20160526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
787675 91899 CVE-2016-5080 BUGTRAQ:20160719 CVE-2016-5080: Memory corruption in code generated by Objective Systems Inc. ASN1C compiler for C/C++ [STIC-2016-0603]  View
787676 91899 CVE-2016-5080 URL:http://www.securityfocus.com/archive/1/archive/1/538952/100/0/threaded  View
787677 91899 CVE-2016-5080 FULLDISC:20160725 CVE-2016-5080: Memory corruption in code generated by Objective Systems Inc. ASN1C compiler for C/C++ [STIC-2016-0603]  View
787678 91899 CVE-2016-5080 URL:http://seclists.org/fulldisclosure/2016/Jul/65  View
787679 91899 CVE-2016-5080 MISC:https://github.com/programa-stic/security-advisories/tree/master/ObjSys/CVE-2016-5080  View
787680 91899 CVE-2016-5080 MISC:https://www.ncsc.nl/dienstverlening/response-op-dreigingen-en-incidenten/beveiligingsadviezen/NCSC-2016-0650+1.00+Kwetsbaarheid+verholpen+in+ASN1C.html  View
787681 91899 CVE-2016-5080 MISC:http://packetstormsecurity.com/files/137970/Objective-Systems-Inc.-ASN1C-For-C-C-Heap-Memory-Corruption.html  View
787682 91899 CVE-2016-5080 CONFIRM:https://source.android.com/security/bulletin/2017-01-01.html  View
787683 91899 CVE-2016-5080 CISCO:20160721 Vulnerability in Objective Systems ASN1C Compiler Affecting Cisco Products  View
787684 91899 CVE-2016-5080 URL:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160721-asn1c  View
787685 91899 CVE-2016-5080 CERT-VN:VU#790839  View
787686 91899 CVE-2016-5080 URL:http://www.kb.cert.org/vuls/id/790839  View
787687 91899 CVE-2016-5080 BID:91836  View
787688 91899 CVE-2016-5080 URL:http://www.securityfocus.com/bid/91836  View
787689 91899 CVE-2016-5080 SECTRACK:1036386  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5267 JVNDB-2016-006040 Apache Hadoop における任意のコマンドを実行される脆弱性 Apache Hadoop には、任意のコマンドを実行される脆弱性が存在します。 CVE-2016-5393 91899 6.5 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006040.html  View