Severity : High Published : 2012-04-24 Modified : 2013-06-05 Base Score : 7.5 Details : Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110. Product/Version : Pro 4.x   CGE 4.x   Mobilinux 4.x   Pro 5.0   CGE 5.x   Mobilinux 5.x   Mobilinux 5.0.24   MVL 5 Atom   Pro 5.0.24   MVL 5 OMAP3   MVL 5 OMAP3530   Carrier Grade CGE 6.0

CVE-2012-4565 CVE-2012-4508 CVE-2012-4444 CVE-2012-4423 CVE-2012-3524 CVE-2012-3511 CVE-2012-3509 CVE-2012-3417 CVE-2012-3401 CVE-2012-3400 CVE-2012-2333 CVE-2012-2319 CVE-2012-2313 CVE-2012-2141 CVE-2012-2131 CVE-2012-2123 CVE-2012-2111 CVE-2012-2110 CVE-2012-2100 CVE-2012-1667 CVE-2012-1182 CVE-2012-1165 CVE-2012-1164 CVE-2012-1146 CVE-2012-1097 CVE-2012-0884 CVE-2012-0879 CVE-2012-0840 CVE-2012-0815 CVE-2012-0814 CVE-2012-0061 CVE-2012-0060 CVE-2012-0053 CVE-2012-0044 CVE-2012-0038 CVE-2012-0031 CVE-2012-0029 CVE-2012-0028 CVE-2012-0027