CVE-2002-0655: OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a…

Description

OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

Exploitation

Is it being used?

Exploit prediction (EPSS)8.2% · higher than 95% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AS

Application Server · Oracle

1.0.2; 1.0.2.1s; 1.0.2.2 · source: NVD

CT

Corporate Time Outlook Connector · Oracle

3.1; 3.1.1; 3.1.2; 3.3 · source: NVD

HS

Http Server · Oracle

9.0.1; 9.2.0 · source: NVD

MO

Mac OS X · Apple

10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.1; +5 more · source: NVD

OP

Openssl · Openssl

0.9.1c; 0.9.2b; 0.9.3; 0.9.4; 0.9.5; 0.9.5a; +7 more · source: NVD