Search for vulnerabilities
Vulnerability ID | VCID-35g4-3f9e-aaah |
Aliases |
CVE-2009-0789
VC-OPENSSL-20090325-CVE-2009-0789 |
Summary | When a malformed ASN1 structure is received it's contents are freed up and zeroed and an error condition returned. On a small number of platforms where sizeof(long) < sizeof(void *) (for example WIN64) this can cause an invalid memory access later resulting in a crash when some invalid structures are read, for example RSA public keys. |
Status | Published |
Exploitability | 0.5 |
Weighted Severity | 5.5 |
Risk | 2.8 |
Affected and Fixed Packages | Package Details |
CWE-189 | Numeric Errors |
Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
Percentile | 0.84664 |
EPSS Score | 0.02727 |
Published At | March 28, 2025, 12:55 p.m. |
Date | Actor | Action | Source | VulnerableCode Version |
---|---|---|---|---|
There are no relevant records. |