CVE-2005-1704

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-24 · updated 2026-06-16
Weakness: CWE-189

Description

Integer overflow in the Binary File Descriptor (BFD) library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer overflow.

Affected products

GNU gdb: through 6.3

References

http://bugs.gentoo.org/show_bug.cgi?id=91398
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001060
http://secunia.com/advisories/15527
http://secunia.com/advisories/17001
http://secunia.com/advisories/17072
http://secunia.com/advisories/17135
http://secunia.com/advisories/17257
http://secunia.com/advisories/17356
http://secunia.com/advisories/17718
http://secunia.com/advisories/18506
http://secunia.com/advisories/21122

Get alerted when CVE-2005-1704 or the next vulnerability affects your stack