CVE:CVE-2010-0742
CNNVD:CNNVD-201006-034
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL的crypto/cms/cms_asn1.c中，在实现Cryptographic Message Syntax (CMS)时，无法正确处理包含OriginatorInfo的结构，攻击者可利用未明向量修改无效内存地址或发起双释放攻击，并可执行任意代码。
solution:Upgrade openssl openssl to a higher version than 0.9.8n,0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,1.0.0,1.0.0:beta1,1.0.0:beta2,1.0.0:beta3,1.0.0:beta4,1.0.0:beta5,and avoid the version (,0.9.8n],0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,0.9.7h,0.9.7i,0.9.7j,0.9.7k,0.9.7l,0.9.7m,0.9.8,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,0.9.8l,0.9.8m,1.0.0,1.0.0:beta1,1.0.0:beta2,1.0.0:beta3,1.0.0:beta4,1.0.0:beta5