NVD

Id
67651  
Name
CVE-2005-1935  
Description
Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818. NOTE: the researcher has claimed that MS:MS04-007 fixes this issue.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-06-13  
Modified Date
2017-07-10  
Seq
2005-1935  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350142 67651 CVE-2005-1935 http://www.phreedom.org/solar/exploits/msasn1-bitstring/  View
350143 67651 CVE-2005-1935 asn1-constructed-heap-overflow(20870)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62701 JVNDB-2004-000042 Microsoft Windows の ASN.1 ライブラリにおける BERDecBitString() 関数によるヒープオーバーフローの脆弱性 Microsoft Windows の ASN.1 ライブラリ (MSASN1.DLL) には、 BERDecBitString() 関数においてヒープオーバーフローの脆弱性が存在します。本脆弱性は、CVE-2003-0818 とは異なる問題です。 CVE-2005-1935 13139 CVE-2005-1935 67651 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000042.html 2004-02-10 2007-04-01 View