CVE-2003-0818 in Windowsinfo

Summary

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.

Be aware that VulDB is the high quality source for vulnerability data.

Disclosure

03/03/2004

Entries

VDB-508 (1)

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.89651

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!