Bugtraq mailing list archives
Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption
From: "Joshua Levitsky" <jlevitsk () joshie com>
Date: Fri, 13 Feb 2004 17:41:45 -0500
----- Original Message ----- Sent: Wednesday, February 11, 2004 2:04 PM Subject: RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption
At the risk of boring everyone with thoughts of "obsolete" technology, I note that Win98SE systems with Internet Explorer 6 SP1 and all current
fixes
contain the library MSASN1.DLL : location: {system drive}\WINDOWS\SYSTEM version: 4.4.3388 size: 51,984 bytes date: 23rd.October.2000
I asked my TAM this very question. Microsoft's response was "This is under investigation by PSS security. If it is affected, per our support policy, a patch should be issued. More to come..." So if there is a problem then expect a patch. Remember that the Windows 98 support was extended a few years so it no longer expired last month. I was rather pleased with Microsoft that they were actively looking in to this, and that a patch would come if it was needed. -- Joshua Levitsky, MCSE, CISSP System Engineer Time Inc. Information Technology [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1]
Current thread:
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption, (continued)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Alun Jones (Feb 11)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Rainer Gerhards (Feb 11)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Steve Friedl (Feb 12)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Thor Lancelot Simon (Feb 13)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Buck Huppmann (Feb 16)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption David Wilson (Feb 16)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Sam Schinke (Feb 12)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Drew Copley (Feb 12)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Boyce, Nick (Feb 13)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Michael Shigorin (Feb 16)
- Re: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Joshua Levitsky (Feb 16)
- RE: EEYE: Microsoft ASN.1 Library Length Overflow Heap Corruption Bill Gallagher (Feb 15)