CVE-2004-1287: Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitra...

Security readout for executives and security teams

This is an old NASM assembler flaw where a malicious assembly source file could trigger a buffer overflow and potentially run code. The practical business risk is mostly in legacy build, packaging, or malware-analysis environments that still process untrusted .asm files with affected NASM versions. Exposure is likely limited to systems that still run the affected NASM package and assemble untrusted or externally supplied assembly files. Build servers, developer workstations, source-package builders, and security research sandboxes are the main places to check. Treat this as a legacy tooling cleanup item unless affected NASM is present in untrusted build workflows. Prioritize remediation higher for shared build systems or analysis environments that process outside code. Mitigation focus: Inventory NASM installations and identify exact package versions.; Check Red Hat RHSA-2005:381 and distribution advisories for fixed packages.; Replace unsupported NASM builds with vendor-supported current packages..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.