CVE-2016-5080 Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of ser...
CriticalCVSS 9.8
EPSS 10.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| objective systems asn1c | <= 7.0.1 | No fix listed |
References
- packetstormsecurity.com
- 20160725 CVE-2016-5080: Memory corruption in code generated by Objective Systems Inc. ASN1C compiler for C/C++ [STIC-2016-0603] mailing-list
- 20160721 Vulnerability in Objective Systems ASN1C Compiler Affecting Cisco Products vendor-advisory
- VU#790839 third-party-advisory us-government-resource
- www.oracle.com
- 20160719 CVE-2016-5080: Memory corruption in code generated by Objective Systems Inc. ASN1C compiler for C/C++ [STIC-2016-0603] mailing-list
- 91836 vdb-entry
- 1036386 vdb-entry
- github.com technical-description third-party-advisory
- source.android.com
- www.ncsc.nl third-party-advisory