CVE-2012-1165: The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows...

Security readout for executives and security teams

This OpenSSL flaw can let a remote sender crash software that parses a malicious S/MIME message. The documented impact is denial of service, not data theft or code execution. It mainly matters for older systems or products still using OpenSSL versions before 0.9.8u or 1.0.0h. Exposure is most likely in legacy mail, gateway, or application components that parse S/MIME using vulnerable OpenSSL builds. The provided affected-products data is incomplete, but several vendor advisories indicate downstream package impact across Linux and product distributions. Treat this as a legacy availability risk. It is not presented as a breach-class issue, but vulnerable mail-facing systems could be crashed by hostile input. Patch during normal security maintenance unless the system processes untrusted S/MIME at scale. Mitigation focus: Upgrade OpenSSL to 0.9.8u, 1.0.0h, or later vendor-fixed packages.; Apply operating system or product updates from the relevant vendor advisory.; Prioritize systems that receive or automatically parse S/MIME messages..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.