NVD

Id
87643  
Name
CVE-2017-10686  
Description
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the token() function and freed in the detoken() function (called by pp_getline()) - it is used again at multiple positions later that could cause multiple damages. For example, it causes a corrupted double-linked list in detoken(), a double free or corruption in delete_Token(), and an out-of-bounds write in detoken(). It has a high possibility to lead to a remote code execution attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-17  
Seq
2017-10686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
429956 87643 CVE-2017-0170 99398  View
429957 87643 CVE-2017-0170 1038855  View
429958 87643 CVE-2017-0170 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0170  View
429959 87643 CVE-2017-0170 99398  View
429960 87643 CVE-2017-0170 1038855  View
429961 87643 CVE-2017-0170 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0170  View

Related JVN