ASN.1 Compiler Multiple Unspecified Vulnerabilities

Bugtraq ID:	11370
Class:	Unknown
CVE:
Remote:	Yes
Local:	Unknown
Published:	Oct 11 2004 12:00AM
Updated:	Oct 11 2004 12:00AM
Credit:	The issues were reported by the vendor. Credit is given to <[email protected]>.
Vulnerable:	ASN.1 Compiler ASN.1 Compiler 0.9.4
Not Vulnerable:	ASN.1 Compiler ASN.1 Compiler 0.9.7

ASN.1 Compiler Multiple Unspecified Vulnerabilities

ASN.1 Compiler is reported prone to multiple unspecified vulnerabilities. The following issues were reported by the vendor:

An issues affecting ASN.1 Compiler presents itself during explicitly tagged ANY type encoding and decoding.

Another security issue involves indefinite length structures appearing in the extensions in CHOICE code.

ASN.1 Compiler versions 0.9.4 is reported prone to these issues. It is probable that other versions are affected as well.

ASN.1 Compiler Multiple Unspecified Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ASN.1 Compiler Multiple Unspecified Vulnerabilities

Solution:
The vendor has released ASN.1 Compiler version 0.9.7 to address these issues.


ASN.1 Compiler ASN.1 Compiler 0.9.4

• ASN.1 Compiler asn1c-0.9.7
  http://sourceforge.net/project/showfiles.php?group_id=103893&package_i d=111693&release_id=274592

ASN.1 Compiler Multiple Unspecified Vulnerabilities

References:

• Home Page (ASN.1 Compiler)
  
• Release Notes (ASN.1 Compiler)