[Full-Disclosure] [USN-45-1] nasm vulnerability

Devdas Bhagat devdas at dvb.homelinux.org
Fri Dec 24 14:11:49 GMT 2004


On 22/12/04 14:26 -0600, Todd Towles wrote:
> So now, I just need to trick a user into running a malicious source file
> that I assembed and sent him, this makes it much harder.

<snip nasm vulnerability details>

You need to publish an exploit for nasm and claim it to be the exploit
for something else. This trick has been used here a few times.

Devdas Bhagat



Full-Disclosure is hosted and sponsored by Secunia.