CVEvulnerability
CVE-2012-1165
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-03-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
Affected configurations
• openssl openssl (<= 0.9.8t)
• openssl openssl 0.9.1c
• openssl openssl 0.9.2b
• openssl openssl 0.9.3
• openssl openssl 0.9.3a
• openssl openssl 0.9.4
• openssl openssl 0.9.5
• openssl openssl 0.9.5a
• openssl openssl 0.9.6
• openssl openssl 0.9.6a
• openssl openssl 0.9.6b
• openssl openssl 0.9.6c
• openssl openssl 0.9.6d
• openssl openssl 0.9.6e
• openssl openssl 0.9.6f
• openssl openssl 0.9.6g
• openssl openssl 0.9.6h
• openssl openssl 0.9.6i
• openssl openssl 0.9.6j
• openssl openssl 0.9.6k
• openssl openssl 0.9.6l
• openssl openssl 0.9.6m
• openssl openssl 0.9.7
• openssl openssl 0.9.7a
• openssl openssl 0.9.7b
• openssl openssl 0.9.7c
• openssl openssl 0.9.7d
• openssl openssl 0.9.7e
• openssl openssl 0.9.7f
• openssl openssl 0.9.7g
• openssl openssl 0.9.7h
• openssl openssl 0.9.7i
• openssl openssl 0.9.7j
• openssl openssl 0.9.7k
• openssl openssl 0.9.7l
• openssl openssl 0.9.7m
• openssl openssl 0.9.8
• openssl openssl 0.9.8a
• openssl openssl 0.9.8b
• openssl openssl 0.9.8c
• openssl openssl 0.9.8d
• openssl openssl 0.9.8e
• openssl openssl 0.9.8f
• openssl openssl 0.9.8g
• openssl openssl 0.9.8h
• openssl openssl 0.9.8i
• openssl openssl 0.9.8j
• openssl openssl 0.9.8k
• openssl openssl 0.9.8l
• openssl openssl 0.9.8m
• openssl openssl 0.9.8n
• openssl openssl 0.9.8o
• openssl openssl 0.9.8p
• openssl openssl 0.9.8q
• openssl openssl 0.9.8r
• openssl openssl 0.9.8s
• openssl openssl 1.0.0
• openssl openssl 1.0.0a
• openssl openssl 1.0.0b
• openssl openssl 1.0.0c
… and 4 more
Related
Weakness · not in database (1)
References
- http://cvs.openssl.org/chngview?cn=22252 cvs.openssl.org
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 h20000.www2.hp.com
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html lists.fedoraproject.org
- http://marc.info/?l=bugtraq&m=133728068926468&w=2 marc.info
- http://marc.info/?l=bugtraq&m=134039053214295&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2012-0426.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0488.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0531.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1306.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1307.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1308.html rhn.redhat.com
- http://secunia.com/advisories/48580 secunia.com
- http://secunia.com/advisories/48895 secunia.com
- http://secunia.com/advisories/48899 secunia.com
- http://www.debian.org/security/2012/dsa-2454 www.debian.org
- http://www.openwall.com/lists/oss-security/2012/03/12/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/12/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/12/7 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/13/2 www.openwall.com
- http://www.securityfocus.com/bid/52764 www.securityfocus.com
- http://www.securitytracker.com/id?1026787 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1424-1 www.ubuntu.com
- https://downloads.avaya.com/css/P8/documents/100162507 downloads.avaya.com
- http://cvs.openssl.org/chngview?cn=22252 cvs.openssl.org
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 h20000.www2.hp.com
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html lists.fedoraproject.org
- http://marc.info/?l=bugtraq&m=133728068926468&w=2 marc.info
- http://marc.info/?l=bugtraq&m=134039053214295&w=2 marc.info
- http://rhn.redhat.com/errata/RHSA-2012-0426.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0488.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-0531.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1306.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1307.html rhn.redhat.com
- http://rhn.redhat.com/errata/RHSA-2012-1308.html rhn.redhat.com
- http://secunia.com/advisories/48580 secunia.com
- http://secunia.com/advisories/48895 secunia.com
- http://secunia.com/advisories/48899 secunia.com
- http://www.debian.org/security/2012/dsa-2454 www.debian.org
- http://www.openwall.com/lists/oss-security/2012/03/12/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/12/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/12/7 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/13/2 www.openwall.com
- http://www.securityfocus.com/bid/52764 www.securityfocus.com
- http://www.securitytracker.com/id?1026787 www.securitytracker.com
- http://www.ubuntu.com/usn/USN-1424-1 www.ubuntu.com
- https://downloads.avaya.com/css/P8/documents/100162507 downloads.avaya.com