RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption

From: Boyce, Nick (nick.boyce_at_eds.com)
Date: 02/11/04

  • Next message: Tim Walraven: "RE: AIM worm spreading around?" 
    To: BUGTRAQ@securityfocus.com
Date: Wed, 11 Feb 2004 19:04:31 -0000

    On 10.Feb.2004, Marc Maiffret wrote :

    > Systems Affected:
    > Microsoft Windows NT 4.0 (all versions)
    > Microsoft Windows 2000 (SP3 and earlier)
    > crosoft Windows XP (all versions)
    >
    > Software Affected:
    > Microsoft Internet Explorer
    > Microsoft Outlook
    > Microsoft Outlook Express
    > Third-party applications that use certificates

    At the risk of boring everyone with thoughts of "obsolete" technology, I
    note that Win98SE systems with Internet Explorer 6 SP1 and all current fixes
    contain the library MSASN1.DLL :

      location: {system drive}\WINDOWS\SYSTEM
      version: 4.4.3388
      size: 51,984 bytes
      date: 23rd.October.2000

    Since the library is apparently used by IE to process webserver SSL
    certificates, can anyone comment on the likely vulnerability of Win98SE
    systems to this flaw (as presented by malicious websites with suitably
    crafted server certificates) ? As is noted here regularly, there are a lot
    of Win98 systems still out there.

    The file versions for MSASN1.DLL listed in
    http://www.microsoft.com/technet/security/bulletin/MS04-007.asp are all of
    the form 5.m.nnnn.x, so it may be that the Win98 version is so much older
    that it doesn't contain the vulnerable code ...

    Nick Boyce
    EDS, Bristol, UK

  • Next message: Tim Walraven: "RE: AIM worm spreading around?"

    Relevant Pages

    • Re: Was ist das : Mein Rechner greift von selber aufs Internet zu
      ... Rechner mit WINXP SP2, Internet Explorer 6.0, Microsoft Outlook 2000 ... Interessant wäre noch zu wissen, ob der Datenverkehr ausgehend oder ...
      (de.comp.security.misc)
    • RE: Mail Merge in Word error
      ... set Microsoft Outlook as your default e-mail ... editor in Microsoft Internet Explorer. ... Start Internet Explorer. ...
      (microsoft.public.word.application.errors)
    • Cant get email to work through toolbar in Internet Explorer
      ... When I'm using internet explorer and I want to send a page or a link to ... i keepp getting a message once microsoft outlook gets ready to send. ... either with email settings or explorer settings and I can't figure it out. ...
      (microsoft.public.officeupdate)
    • Security update trashed computer
      ... now a variety of things don't work. ... internet explorer, but it does nothing - won't go to site. ... Trying to attach a file in Microsoft Outlook just freezes Outlook. ...
      (microsoft.public.windowsxp.general)
    • certificates & encrypting
      ... I get the error message: "Microsoft Outlook could not ... sign or encrypt your this message because you have no ... What does this mean & how do I get the certificates ...
      (microsoft.public.outlook)