Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote…

Exploit prediction (EPSS)

29.75% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• ciac.org /ciac/bulletins/o-114.shtml · third-party-advisory, government-resource, x_refsource_CIAC, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A924 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• securityfocus.com /bid/10118 · vdb-entry, x_refsource_BID, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/15713 · vdb-entry, x_refsource_XF, x_transferred
• docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-011 · vendor-advisory, x_refsource_MS, x_transferred
• us-cert.gov /cas/techalerts/TA04-104A.html · third-party-advisory, x_refsource_CERT, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1007 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• kb.cert.org /vuls/id/255924 · third-party-advisory, x_refsource_CERT-VN, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1076 · vdb-entry, signature, x_refsource_OVAL, x_transferred

Sources

• CVE List: CVE-2004-0123
• NVD: CVE-2004-0123

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.