CVE

Id
94364  
CVE No.
CVE-2016-7544  
Status
Candidate  
Description
Crypto++ 5.6.4 incorrectly uses Microsoft"s stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
796289 94364 CVE-2016-7544 MLIST:[oss-security] 20160922 CVE Assignment for Crypto++ and "AES and incorrect argument to _freea() under Microsoft compilers"  View
796290 94364 CVE-2016-7544 URL:http://www.openwall.com/lists/oss-security/2016/09/23/5  View
796291 94364 CVE-2016-7544 MLIST:[oss-security] 20160923 Re: CVE Assignment for Crypto++ and "AES and incorrect argument to _freea() under Microsoft compilers"  View
796292 94364 CVE-2016-7544 URL:http://www.openwall.com/lists/oss-security/2016/09/23/9  View
796293 94364 CVE-2016-7544 CONFIRM:https://github.com/weidai11/cryptopp/issues/302  View
796294 94364 CVE-2016-7544 CONFIRM:https://www.cryptopp.com/release565.html  View
796295 94364 CVE-2016-7544 BID:93164  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4986 JVNDB-2016-005759 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-7857 94364 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005759.html  View