CVE-2004-2645 Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures."
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asn.1 compiler | = 0.9.4 | No fix listed |
| asn.1 compiler | = 0.9.5 | No fix listed |
| asn.1 compiler | = 0.9.6 | No fix listed |
References
- 12794 patch third-party-advisory vendor-advisory
- 1011622 patch vdb-entry
- sourceforge.net
- 10684 patch vdb-entry
- 11370 patch vdb-entry
- asn1c-choice-type(17696) vdb-entry
- Debian Security Tracker CVE-2004-2645 vendor-advisory