NVD

Id
73917  
Name
CVE-2003-0818  
Description
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2004-03-03  
Modified Date
2016-10-17  
Seq
2003-0818  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380075 73917 CVE-2003-0818 20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption  View
380076 73917 CVE-2003-0818 20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption  View
380077 73917 CVE-2003-0818 20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption  View
380078 73917 CVE-2003-0818 20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption  View
380079 73917 CVE-2003-0818 oval:org.mitre.oval:def:653  View
380080 73917 CVE-2003-0818 oval:org.mitre.oval:def:796  View
380081 73917 CVE-2003-0818 oval:org.mitre.oval:def:797  View
380082 73917 CVE-2003-0818 oval:org.mitre.oval:def:799  View
380083 73917 CVE-2003-0818 VU#216324  View
380084 73917 CVE-2003-0818 VU#583108  View
380085 73917 CVE-2003-0818 MS04-007  View
380086 73917 CVE-2003-0818 TA04-041A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62696 JVNDB-2004-000037 Microsoft Windows ASN.1 ライブラリに複数の脆弱性 Microsoft Windows ASN.1 ライブラリ (msasn1.dll) には整数オーバーフローに関連する脆弱性があります。 CVE-2003-0818 7641 CVE-2003-0818 73917 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000037.html 2004-02-10 2007-04-01 View