Vulnerabilities > CVE-2016-5080 - Unspecified vulnerability in Objective Systems Asn1C 7.0.1

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
objective-systems
critical
NVD
Published: 2016-07-19
Updated: 2024-11-21

Summary

Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.

Vulnerable Configurations

Part Description Count
Application
Objective_Systems
1

References