CVE-2016-5080 Integer overflow in n/a
Integer overflow in ASN1C library allows attackers to execute arbitrary code or cause denial of service via crafted ASN.1 data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5080?
CVE-2016-5080 is a critical vulnerability in n/a, published on 19 Jul 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN1C for C/C++ before 7.0.2 allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow), on a system running an application compiled by ASN1C, via crafted ASN.1 data.
Which versions are affected by CVE-2016-5080?
It affects 1 product.
Products include Objective Systems Asn1c.
How do I fix CVE-2016-5080?
No fix has been published for CVE-2016-5080 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5080 being exploited?
There is no known exploitation of CVE-2016-5080 in the wild and no public exploit code.
Sources
Also known as GHSA-8c5g-jh8w-2ffj.