F-Secure Vulnerability Information :
NASM "ppscan()" Off-By-One Vulnerability

A vulnerability has been reported in NASM, which potentially can be exploited by malicious people to compromise a user"s system.

The vulnerability is caused due to an off-by-one error within the "ppscan()" function in preproc.c. This can be exploited to cause a stack-based buffer overflow with a zero byte by tricking the user into assembling a specially crafted ASM file.

Successful exploitation may allow execution of arbitrary code.