header-logo
Suggest Exploit
vendor:
NASM
by:
Unknown
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: NASM
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE: a:nasm:nasm
Metasploit:
Other Scripts:
Platforms Tested:
Unknown

NASM Buffer Overflow

NASM is prone to a buffer overflow. This condition is exposed when the application attempts to assemble a source file that contains malformed '%error' preprocessor directive arguments. Since the source file may originate from an external or untrusted source, this vulnerability is considered remote in nature. Successful exploitation will permit arbitrary code execution with the privileges of the user running the application.

Mitigation:

Apply the latest patch or update from the vendor. Avoid using untrusted or external source files.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/11991/info

NASM is prone to a buffer overflow. This condition is exposed when the application attempts to assemble a source file that contains malformed '%error' preprocessor directive arguments. Since the source file may originate from an external or untrusted source, this vulnerability is considered remote in nature.

Successful exploitation will permit arbitrary code execution with the privileges of the user running the application. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25005.zip