Description
Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly execute arbitrary code via an S/MIME email message containing certain unexpected ASN.1 constructs, as demonstrated using the NISSC test suite.
References
- RHSA-2004:110 vendor-advisory
- FLSA:2089 vendor-advisory
- oval:org.mitre.oval:def:11462 vdb-entry signature
- http://www.uniras.gov.uk/vuls/2003/006489/smime.htm
- 8981 vdb-entry
- RHSA-2004:112 vendor-advisory
- smime-asn1-bo(13603) vdb-entry
- oval:org.mitre.oval:def:872 vdb-entry signature
- SSRT4722 vendor-advisory
- MDKSA-2004:021 vendor-advisory
- VU#428230 third-party-advisory
- oval:org.mitre.oval:def:914 vdb-entry signature