CVE-2005-1194
Fixed in a distro release EPSS <1%
Stack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2004-1287.
Products: redhat enterprise_linux, redhat enterprise_linux_desktop, redhat linux_advanced_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nasm | 0.98.38-1.2 |
| Debian 13 | nasm | 0.98.38-1.2 |
| Debian 14 | nasm | 0.98.38-1.2 |
| Red Hat Enterprise Linux 3 | nasm | 0:0.98.35-3.EL3 |
| Red Hat Enterprise Linux 3 | nasm-debuginfo | 0:0.98.35-3.EL3 |
| Red Hat Enterprise Linux 4 | nasm | 0:0.98.38-3.EL4 |
| Red Hat Enterprise Linux 4 | nasm-debuginfo | 0:0.98.38-3.EL4 |
| Red Hat Enterprise Linux 4 | nasm-doc | 0:0.98.38-3.EL4 |
| Red Hat Enterprise Linux 4 | nasm-rdoff | 0:0.98.38-3.EL4 |