CVE-2005-4807

Related Files

Mandriva Linux Security Advisory 2006.153

Posted Aug 29, 2006

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory MDKSA-2006-153 - A stack-based buffer overflow in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code. A buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format record in which the length character is not a valid hexadecimal character.

tags | advisory, denial of service, overflow, arbitrary

systems | linux, mandriva

advisories | CVE-2005-4807, CVE-2006-2362

SHA-256 | 20bae66b913b708c81f4d4d713ab9094b1a1cd129693db985f0f4ac8827cbe5c

Download | Favorite | View