Public Date:
598738: CVE-2010-0742 openssl: invalid ASN1 module definition for CMS

The MITRE CVE dictionary describes this issue as:

The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.

Find out more about CVE-2010-0742 from the MITRE CVE dictionary dictionary and NIST NVD.


Not vulnerable. These issues did not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 3, 4, or 5.

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 6 openssl Not affected