CVE-2005-4808

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069Issue Tracking, Patch, Third Party Advisory
http://www.ubuntu.com/usn/usn-366-1Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44661Third Party Advisory, VDB Entry
http://sources.redhat.com/bugzilla/show_bug.cgi?id=1069Issue Tracking, Patch, Third Party Advisory
http://www.ubuntu.com/usn/usn-366-1Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44661Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-48095.0Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof the URL in the Status CVE-2005-48105.0Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Conten CVE-2005-48114.9The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local users to cause a deni CVE-2005-48127.8The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 and earlier, and the IC CVE-2005-48135.0Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, CVE-2005-48147.5Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with the PHP interpreter,CVE-2005-48157.5SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and CVE-2005-48167.5Buffer overflow in mod_radius in ProFTPD before 1.3.0rc2 allows remote attackers to cause a denial of service (crash) and possibly execute a CVE-2005-48177.5Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly CVE-2005-48187.5Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors. N CVE-2005-48196.8Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0 allows remote attack CVE-2005-48205.0SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the router with traffic.