CVE - CVE-2005-1704

CVE-ID
CVE-2005-1704	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates URL:http://www.securityfocus.com/archive/1/464745/100/0/threaded CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=91398 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-222.pdf CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-015.htm CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-178.htm CONFIRM:http://www.vmware.com/support/vi3/doc/esx-55052-patch.html CONECTIVA:CLA-2006:1060 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060 GENTOO:GLSA-200505-15 URL:http://security.gentoo.org/glsa/glsa-200505-15.xml GENTOO:GLSA-200506-01 URL:http://www.gentoo.org/security/en/glsa/glsa-200506-01.xml MANDRAKE:MDKSA-2005:095 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:095 MANDRAKE:MDKSA-2005:215 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:215 REDHAT:RHSA-2005:659 URL:http://www.redhat.com/support/errata/RHSA-2005-659.html REDHAT:RHSA-2005:763 URL:http://www.redhat.com/support/errata/RHSA-2005-763.html REDHAT:RHSA-2005:801 URL:http://www.redhat.com/support/errata/RHSA-2005-801.html REDHAT:RHSA-2005:673 URL:http://www.redhat.com/support/errata/RHSA-2005-673.html REDHAT:RHSA-2005:709 URL:http://www.redhat.com/support/errata/RHSA-2005-709.html REDHAT:RHSA-2006:0368 URL:http://www.redhat.com/support/errata/RHSA-2006-0368.html REDHAT:RHSA-2006:0354 URL:http://www.redhat.com/support/errata/RHSA-2006-0354.html SGI:20060703-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc TRUSTIX:2005-0025 URL:http://www.trustix.org/errata/2005/0025/ UBUNTU:USN-136-1 URL:https://usn.ubuntu.com/136-1/ BID:13697 URL:http://www.securityfocus.com/bid/13697 OVAL:oval:org.mitre.oval:def:9071 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9071 VUPEN:ADV-2007-1267 URL:http://www.vupen.com/english/advisories/2007/1267 OSVDB:16757 URL:http://www.osvdb.org/16757 SECTRACK:1016544 URL:http://securitytracker.com/id?1016544 SECUNIA:15527 URL:http://secunia.com/advisories/15527 SECUNIA:17718 URL:http://secunia.com/advisories/17718 SECUNIA:17072 URL:http://secunia.com/advisories/17072 SECUNIA:17135 URL:http://secunia.com/advisories/17135 SECUNIA:17257 URL:http://secunia.com/advisories/17257 SECUNIA:17356 URL:http://secunia.com/advisories/17356 SECUNIA:17001 URL:http://secunia.com/advisories/17001 SECUNIA:18506 URL:http://secunia.com/advisories/18506 SECUNIA:21122 URL:http://secunia.com/advisories/21122 SECUNIA:21262 URL:http://secunia.com/advisories/21262 SECUNIA:21717 URL:http://secunia.com/advisories/21717 SECUNIA:24788 URL:http://secunia.com/advisories/24788
Assigning CNA
N/A
Date Entry Created
20050524	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050524)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.