CVE-2008-2719: Buffer Overflow

Published Jun 16, 2008

Updated

Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow.

Affected Software

1 affected component

nasm Netwide Assembler=2.02

Event History

Jun 16, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2719?

CVE-2008-2719 is considered a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2008-2719?

To mitigate CVE-2008-2719, it is recommended to upgrade to a fixed version of Netwide Assembler that addresses the vulnerability.

What type of vulnerability is CVE-2008-2719?

CVE-2008-2719 is a stack-based buffer overflow vulnerability caused by an off-by-one error.

What software is affected by CVE-2008-2719?

CVE-2008-2719 specifically affects Netwide Assembler (NASM) version 2.02.

Can CVE-2008-2719 lead to remote code execution?

Yes, CVE-2008-2719 can potentially allow attackers to execute arbitrary code via a crafted file.