CVE-2012-2131 in OpenSSL
Summary
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
04/04/2012
Disclosure
04/24/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60637 | OpenSSL numeric error | 189 | Proof-of-Concept | Not defined | CVE-2012-2131 |