CVE-2005-4807

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugs.gentoo.org/show_bug.cgi?id=99464Patch, Third Party Advisory
http://secunia.com/advisories/21508Patch, Third Party Advisory
http://secunia.com/advisories/21530Patch, Third Party Advisory
http://www.osvdb.org/27960Broken Link
http://www.securityfocus.com/bid/19555Exploit, Patch, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-336-1Patch, Third Party Advisory
http://www.vupen.com/english/advisories/2006/3307Permissions Required
http://bugs.gentoo.org/show_bug.cgi?id=99464Patch, Third Party Advisory
http://secunia.com/advisories/21508Patch, Third Party Advisory
http://secunia.com/advisories/21530Patch, Third Party Advisory
http://www.osvdb.org/27960Broken Link
http://www.securityfocus.com/bid/19555Exploit, Patch, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/usn-336-1Patch, Third Party Advisory
http://www.vupen.com/english/advisories/2006/3307Permissions Required

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-48087.6Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allo CVE-2005-48095.0Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status CVE-2005-48105.0Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Conten CVE-2005-48114.9The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a deni CVE-2005-48127.8The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the IC CVE-2005-48135.0Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, CVE-2005-48147.5Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter,CVE-2005-48157.5SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and CVE-2005-48167.5Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute a CVE-2005-48177.5Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly CVE-2005-48187.5Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors. N CVE-2005-48196.8Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attack