The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
Affected Platforms
Oracle Application ServerOracle Corporate Time Outlook ConnectorOracle Http ServerApple Mac Os XOpenssl Openssl