CVE-2007-4995

Description

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.

Affected Platforms

Weakness Type

CWE-189

References

• http://bugs.gentoo.org/show_bug.cgi?id=195634
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773
• http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
• http://secunia.com/advisories/25878
• http://secunia.com/advisories/27205
• http://secunia.com/advisories/27217