Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code.
References
Link | Resource |
---|---|
http://bugs.gentoo.org/show_bug.cgi?id=99464 | Patch Third Party Advisory |
http://www.ubuntu.com/usn/usn-336-1 | Patch Third Party Advisory |
http://www.securityfocus.com/bid/19555 | Exploit Patch Third Party Advisory VDB Entry |
http://secunia.com/advisories/21508 | Patch Third Party Advisory |
http://secunia.com/advisories/21530 | Patch Third Party Advisory |
http://www.osvdb.org/27960 | Broken Link |
http://www.vupen.com/english/advisories/2006/3307 | Permissions Required |
Information
Published : 2005-12-30 21:00
Updated : 2020-04-01 05:54
NVD link : CVE-2005-4807
Mitre link : CVE-2005-4807
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
canonical
- ubuntu_linux
gnu
- binutils