Multiple Windows ASN.1 bugs updated since 11.02.2004
Published:		25.02.2004
Source:		MICROSOFT
SecurityVulns ID:		3438
Type:		remote
Level:		10/10
Description:		Heap corruptions, heap buffer overflows open possibilities for attack via different protocols and applications.

Affected:		MICROSOFT : Windows NT 4.0 Workstation
		MICROSOFT : Windows NT 4.0 Server
		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		flashsky fangxing, MS ASN library is fraught not only with integer overflow, but also with stack overflow. (25.02.2004)
		MICROSOFT, Microsoft Security Bulletin MS04-007 (11.02.2004)
		Marc Maiffret, EEYE: Microsoft ASN.1 Library Bit String Heap Corruption (11.02.2004)
		Marc Maiffret, EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption (11.02.2004)

Files:		MS04-007 LSASS.EXE Win2k Pro Remote Denial-of-Service Exploit
Discuss:		Read or add your comments to this news (0 comments)