CVE-2003-0818

Published Feb 11, 2004 CVSS 2.0 · 7.5 High EPSS 82.2% KEV · Not listed
Description
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 2:05 AM
Reserved
Sep 18, 2003, 12:00 AM
Status
Modified
Published
Mar 3, 2004, 5:00 AM
Modified
Jun 16, 2026, 10:02 PM