CVE-2004-1287
NoneCVSS
—
EPSS
17.9%
Published
Jan 10, 2005
CISA due date
—
The record
Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | nasm | 0 | 0.98.38-1.1 |
| Debian:12 | nasm | 0 | 0.98.38-1.1 |
| Debian:13 | nasm | 0 | 0.98.38-1.1 |
| Debian:3.0 | nasm | 0 | 0.98.28cvs-1woody2 |
| Red Hat:enterprise_linux:3::as | nasm | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:3::as | nasm-debuginfo | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:3::desktop | nasm | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:3::desktop | nasm-debuginfo | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:3::es | nasm | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:3::es | nasm-debuginfo | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:3::ws | nasm | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:3::ws | nasm-debuginfo | 0 | 0:0.98.35-3.EL3 |
| Red Hat:enterprise_linux:4::as | nasm | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::as | nasm-debuginfo | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::as | nasm-doc | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::as | nasm-rdoff | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::desktop | nasm | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::desktop | nasm-debuginfo | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::desktop | nasm-doc | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::desktop | nasm-rdoff | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::es | nasm | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::es | nasm-debuginfo | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::es | nasm-doc | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::es | nasm-rdoff | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::ws | nasm | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::ws | nasm-debuginfo | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::ws | nasm-doc | 0 | 0:0.98.38-3.EL4 |
| Red Hat:enterprise_linux:4::ws | nasm-rdoff | 0 | 0:0.98.38-3.EL4 |
Related vulnerabilities
- CVE-2017-10686 In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free… Also affects nasm
- CVE-2008-2719 Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02… Also affects nasm
- CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli… CWE-787
- CVE-2026-112397 Pillow is a Python imaging library. CWE-787
- CVE-2026-112059 libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point… CWE-787
- CVE-2026-89088 A flaw was found in parted. CWE-787
- CVE-2026-89085 A flaw was found in parted. CWE-787
- CVE-2026-85746 MariaDB server is a community developed fork of MySQL server. CWE-787