CVE-2005-1194 Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.
MediumCVSS 4.6
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux | = 4.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 4.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
| debian/nasm(Debian:12) | < 0.98.38-1.2 | 0.98.38-1.2 |
| debian/nasm(Debian:13) | < 0.98.38-1.2 | 0.98.38-1.2 |
| debian/nasm(Debian:14) | < 0.98.38-1.2 | 0.98.38-1.2 |
References
- RHSA-2005:381 patch vendor-advisory
- 13506 vdb-entry
- oval:org.mitre.oval:def:11256 signature vdb-entry
- Debian Security Tracker CVE-2005-1194 vendor-advisory
- bugs.debian.org issue-tracking