ASN.1 Vulnerability - What's The Big Deal?
Thursday February 12, 2004
Microsoft Security Bulletin MS04-007 addresses a buffer overrun flaw in the ASN.1 implementation in every version of Windows since Windows 98. Some say this may be the biggest vulnerability in Windows yet- bigger than the RPC / DCOM flaws that led to the MSBlast (Blaster) worm variants that hit last year. What is ASN.1? Is there a reason to be concerned? Why is this vulnerability such a big deal? ASN.1 Vulnerability - What's The Big Deal?