CVE-2012-1165

openssl: mime_param_cmp NULL dereference crash

Published Mar 15, 2012 CVSS 2.0 · 5.0 Medium EPSS 6.5% KEV · Not listed
Description
The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2454-1 openssl security update
EUVD EUVD EUVD-2012-1195 The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
Ubuntu USN Ubuntu USN USN-1424-1 OpenSSL vulnerabilities
References
Link Providers
http://cvs.openssl.org/chngview?cn=22252 cve-icon cve-icon
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html cve-icon cve-icon
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html cve-icon cve-icon
http://marc.info/?l=bugtraq&m=133728068926468&w=2 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=134039053214295&w=2 cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-0426.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-0488.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-0531.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-1306.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-1307.html cve-icon cve-icon
http://rhn.redhat.com/errata/RHSA-2012-1308.html cve-icon cve-icon
http://secunia.com/advisories/48580 cve-icon cve-icon
http://secunia.com/advisories/48895 cve-icon cve-icon
http://secunia.com/advisories/48899 cve-icon cve-icon
http://www.debian.org/security/2012/dsa-2454 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2012/03/12/3 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2012/03/12/6 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2012/03/12/7 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2012/03/13/2 cve-icon cve-icon
http://www.securityfocus.com/bid/52764 cve-icon cve-icon
http://www.securitytracker.com/id?1026787 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1424-1 cve-icon cve-icon
https://downloads.avaya.com/css/P8/documents/100162507 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2012-1165 cve-icon
https://www.cve.org/CVERecord?id=CVE-2012-1165 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 6:53 PM
Reserved
Feb 14, 2012, 12:00 AM
Status
Modified
Published
Mar 15, 2012, 5:55 PM
Modified
Jun 16, 2026, 11:39 PM
Severity
Moderate
Public date
Mar 12, 2012, 12:00 AM