Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.

Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.

Malformed ASN1 streams in V2C and similar input files can be used to generate stack-based buffer overflows. The vulnerability could allow arbitrary code execution. Language packs containing malformed filenames could lead to a stack buffer overflow. The vulnerability could allow arbitrary code execution. Zipped language packs with invalid HTML files could lead to NULL pointer access. The vulnerability could cause denial of service of the remote process. A stack overflow flaw in the custom XML-parser could allow remote denial of service. Remote manipulation of the language pack updater could allow NTLM-relay attacks. Arbitrary memory read from controlled memory pointer could allow remote denial of service. A memory corruption flaw could allow remote code execution. The administrative interface can be remotely enabled and disabled without authentication. This could increase the attack surface.