NVD

Id
12287  
Name
CVE-2010-0742  
Description
The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-03  
Modified Date
2014-03-26  
Seq
2010-0742  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67657 12287 CVE-2010-0742 http://cvs.openssl.org/chngview?cn=19693  View
67658 12287 CVE-2010-0742 http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1  View
67659 12287 CVE-2010-0742 SSRT100341  View
67660 12287 CVE-2010-0742 oval:org.mitre.oval:def:12395  View
67661 12287 CVE-2010-0742 http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest  View
67662 12287 CVE-2010-0742 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
67663 12287 CVE-2010-0742 http://www.openssl.org/news/secadv_20100601.txt  View
67664 12287 CVE-2010-0742 40502  View
67665 12287 CVE-2010-0742 ADV-2010-1313  View
67666 12287 CVE-2010-0742 ADV-2010-3105  View
67667 12287 CVE-2010-0742 https://bugzilla.redhat.com/show_bug.cgi?id=598738  View
67668 12287 CVE-2010-0742 https://kb.bluecoat.com/index?page=content&id=SA50  View
67669 12287 CVE-2010-0742 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released  View
67670 12287 CVE-2010-0742 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35746 JVNDB-2010-001526 OpenSSL の Cryptographic Message Syntax (CMS) の実装における任意のコードを実行される脆弱性 OpenSSL の crypto/cms/cms_asn1.c にある Cryptographic Message Syntax (CMS) の実装には、OriginatorInfo を含んだ構造体を適切に処理しないため、不正にメモリ領域を編集される、またはメモリ二重解放が発生する、および任意のコードを実行される脆弱性が存在します。 CVE-2010-0742 43322 CVE-2010-0742 12287 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001526.html 2010-06-01 2010-12-16 View