| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
binutils: buffer overflow
| Package(s): | binutils | CVE #(s): | CVE-2005-4807 | ||||||
| Created: | August 17, 2006 | Updated: | October 19, 2006 | ||||||
| Description: | The GNU assembler (gas) in binutils is vulnerable to a buffer overflow. If a user can be tricked into assembling a specially crafted file with gcc or gas, arbitrary code can be executed with the privileges of the user. | ||||||||
| Alerts: |
| ||||||||
(Log in to post comments)
binutils: buffer overflow
Posted Aug 24, 2006 18:15 UTC (Thu) by ernest (subscriber, #2355) [Link]
this is ridiculous. if a user can tricked to compile a specialy crafted program you do not need a buffer overflow to create a program that can do bad things. For god's sack! please re-read what you have just written!
binutils: buffer overflow
Posted Aug 25, 2006 16:04 UTC (Fri) by nix (subscriber, #2304) [Link]
I thought this once, but it's wrong. Consider programs that assemble code to be run on another machine, especially things like cross-assemblers. You don't expect to have to nail down a system that merely *compiles* untrusted code (assuming the build system is trusted).
Has a CVE now
Posted Sep 2, 2006 16:40 UTC (Sat) by kreutzm (subscriber, #4700) [Link]
This bug is CVE 2005-5807. Please add this to your database.