CVE Kennung:	CVE-2010-0742
Beschreibung:	The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.67582   1.3.6.1.4.1.25623.1.0.67584   1.3.6.1.4.1.25623.1.0.100668   1.3.6.1.4.1.25623.1.0.67601   1.3.6.1.4.1.25623.1.0.835245
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0742 BugTraq ID: 40502 http://www.securityfocus.com/bid/40502 HPdes Security Advisory: HPSBUX02610 http://marc.info/?l=bugtraq&m=129138643405740&w=2 HPdes Security Advisory: SSRT100341 http://marc.info/?l=bugtraq&m=129138643405740&w=2 https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12395 http://secunia.com/advisories/40000 http://secunia.com/advisories/40024 http://secunia.com/advisories/42457 http://secunia.com/advisories/42724 http://secunia.com/advisories/42733 http://secunia.com/advisories/57353 http://www.vupen.com/english/advisories/2010/1313 http://www.vupen.com/english/advisories/2010/3105