Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Objective Systems ASN1C for C/C++ 整数溢出漏洞
Vulnerability Description
Objective Systems ASN1C for C/C++是美国Objective Systems公司的一款ASN.1(抽象语法标记)编译器,它可以实现BER、DER和PER等多种编解码方式,并能够自动将ASN.1转化为C/C++的数据结构。 Objective Systems ASN1C for C/C++ 7.0.2之前的版本中的asn1rt_a.lib文件中的‘rtxMemHeapAlloc’函数存在整数溢出漏洞。攻击者可借助特制的ASN.1数据利用该漏洞造成拒绝服务(基于堆的缓冲区溢出)。
CVSS Information
N/A
Vulnerability Type
N/A