CVE-2004-1287 Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.
HighCVSS 10.0
EPSS 17.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nasm netwide assembler | = 0.98.38 | No fix listed |
| debian/nasm(Debian:12) | < 0.98.38-1.1 | 0.98.38-1.1 |
| debian/nasm(Debian:13) | < 0.98.38-1.1 | 0.98.38-1.1 |
| debian/nasm(Debian:14) | < 0.98.38-1.1 | 0.98.38-1.1 |
References
- Debian Security Tracker CVE-2004-1287 vendor-advisory
- bugs.debian.org issue-tracking
- tigger.uic.edu exploit vendor-advisory
- RHSA-2005:381 not-applicable vendor-advisory
- nasm-preprocc-bo(18540) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:11299 broken-link signature vdb-entry