Description
The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote attackers to cause a denial of service (application crash) via a message with an incorrect "object key", which triggers an assert error.
References
- 20060709 Re: Mico crashes when contected with wrong IOR / DoS mailing-list
- 20970 third-party-advisory
- 18869 vdb-entry
- 20060706 Mico crashes when contected with wrong IOR / DoS mailing-list
- 20060710 Re: Mico crashes when contected with wrong IOR / DoS mailing-list
- 27029 vdb-entry
- 1210 third-party-advisory
- 20060706 Mico crashes when contected with wrong IOR / DoS mailing-list
- http://mico.org/down.html
- mico-setanswerinvoke-dos(27686) vdb-entry
- ADV-2006-2709 vdb-entry