CVE-2003-0818 Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attac...
HighCVSS 7.5
EPSS 82.2%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption mailing-list
- 20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption mailing-list
- 20040210 EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption mailing-list
- 20040210 EEYE: Microsoft ASN.1 Library Bit String Heap Corruption mailing-list
- VU#216324 third-party-advisory us-government-resource
- VU#583108 third-party-advisory us-government-resource
- TA04-041A third-party-advisory us-government-resource
- MS04-007 vendor-advisory
- oval:org.mitre.oval:def:653 signature vdb-entry
- oval:org.mitre.oval:def:796 signature vdb-entry
- oval:org.mitre.oval:def:797 signature vdb-entry
- oval:org.mitre.oval:def:799 signature vdb-entry