Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.

An updated nasm package that fixes multiple security issues is now available.

This update has been rated as having low security impact by the Red Hat Security Response Team.

NASM is an 80x86 assembler.

Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM file in such a way that when compiled by a victim, could execute arbitrary code on their machine. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2004-1287 and CVE-2005-1194 to these issues.

All users of nasm are advised to upgrade to this updated package, which contains backported fixes for these issues.

Jonathan Rockway discovered a locally exploitable buffer overflow in the error() function of nasm. If an attacker tricked a user into assembling a malicious source file, they could exploit this to execute arbitrary code with the privileges of the user that runs nasm.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:381 advisory.

    NASM is an 80x86 assembler.

    Two stack based buffer overflow bugs have been found in nasm. An attacker     could create an ASM file in such a way that when compiled by a victim,     could execute arbitrary code on their machine. The Common Vulnerabilities     and Exposures project (cve.mitre.org) has assigned the names CAN-2004-1287     and CAN-2005-1194 to these issues.

    All users of nasm are advised to upgrade to this updated package, which     contains backported fixes for these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A buffer overflow in nasm was discovered by Jonathan Rockway. This vulnerability could lead to the execution of arbitrary code when compiling a malicious assembler source file.

The updated packages are patched to correct the problem.

Jonathan Rockway discovered a buffer overflow in nasm, the general-purpose x86 assembler, which could lead to the execution of arbitrary code when compiling a maliciously crafted assembler source file.

ID	Name	Product	Family	Severity
21816	CentOS 3 / 4 : nasm (CESA-2005:381)	Nessus	CentOS Local Security Checks	critical
20662	Ubuntu 4.10 : nasm vulnerability (USN-45-1)	Nessus	Ubuntu Local Security Checks	critical
18196	RHEL 4 : nasm (RHSA-2005:381)	Nessus	Red Hat Local Security Checks	high
16117	Mandrake Linux Security Advisory : nasm (MDKSA-2005:004)	Nessus	Mandriva Local Security Checks	critical
16096	Debian DSA-623-1 : nasm - buffer overflow	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2004-1287

high

Tenable Plugins

critical

critical

high

critical

critical