CVE:CVE-2006-7250
CNNVD:CNNVD-201202-512
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 0.9.8t及之前版本中的crypto/asn1/asn_mime.c的mime_hdr_cmp函数中存在漏洞。远程攻击者可利用该漏洞借助特制的S/MIME信息，导致拒绝服务（空指针解引用和应用程序崩溃）。
solution:Upgrade openssl openssl to a higher version than 0.9.8t,0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,0.9.8m:beta1,0.9.8n,0.9.8o,0.9.8p,0.9.8q,0.9.8r,0.9.8s,and avoid the version (,0.9.8t],0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,0.9.8m:beta1,0.9.8n,0.9.8o,0.9.8p,0.9.8q,0.9.8r,0.9.8s