PT-2009-2644 · Nasm · Netwide Assembler

Published 2009-09-08 · Updated 2018-10-31 · CVE-2008-7177

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Netwide Assembler (NASM) versions prior to 2.03.01

Description A buffer overflow issue exists in the listing module of Netwide Assembler (NASM). The impact and attack vectors of this issue are not specified.

Recommendations For versions prior to 2.03.01, update to version 2.03.01 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-7177

Affected Products

Netwide Assembler

References · 12

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=452800 · Exploit
• https://redhat.com/archives/fedora-package-announce/2008-June/msg01000.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-7177 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-7177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-7177 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2008-7177 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43441 · Note
• http://vupen.com/english/advisories/2008/1939 · Note
• http://securitytracker.com/id?1020378 · Note
• http://securityfocus.com/bid/29955 · Note
• http://secunia.com/advisories/30836 · Note
• http://sourceforge.net/project/shownotes.php?release_id=607497 · Note