CVE-2005-1704 Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted...
MediumCVSS 4.6
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU gdb | <= 6.3 | No fix listed |
| debian/gdb(Debian:12) | < 6.3-6 | 6.3-6 |
| debian/gdb(Debian:13) | < 6.3-6 | 6.3-6 |
| debian/gdb(Debian:14) | < 6.3-6 | 6.3-6 |
References
- bugs.gentoo.org
- CLA-2006:1060 vendor-advisory
- 15527 third-party-advisory vendor-advisory
- 17001 third-party-advisory vendor-advisory
- 17072 third-party-advisory vendor-advisory
- 17135 third-party-advisory vendor-advisory
- 17257 third-party-advisory vendor-advisory
- 17356 third-party-advisory vendor-advisory
- 17718 third-party-advisory vendor-advisory
- 18506 third-party-advisory
- 21122 third-party-advisory vendor-advisory
- 21262 third-party-advisory vendor-advisory
- 21717 third-party-advisory vendor-advisory
- 24788 third-party-advisory vendor-advisory
- GLSA-200505-15 vendor-advisory
- 1016544 vdb-entry
- support.avaya.com
- support.avaya.com
- support.avaya.com
- GLSA-200506-01 vendor-advisory
- MDKSA-2005:095 vendor-advisory
- MDKSA-2005:215 vendor-advisory
- 16757 vdb-entry
- RHSA-2005:659 vendor-advisory
- RHSA-2005:673 vendor-advisory
- RHSA-2005:709 vendor-advisory
- RHSA-2005:763 vendor-advisory
- RHSA-2005:801 vendor-advisory
- RHSA-2006:0354 vendor-advisory
- RHSA-2006:0368 vendor-advisory
- 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates mailing-list
- 13697 vdb-entry
- 2005-0025 vendor-advisory
- www.vmware.com
- ADV-2007-1267 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:9071 signature vdb-entry
- USN-136-1 vendor-advisory
- Debian Security Tracker CVE-2005-1704 vendor-advisory