Lucene search
HistoryDec 27, 2011 - 11:55 a.m.
CVE-2011-4783
cve-2011-4783
idapython
ida pro
remote code execution
crafted idb file
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.7%
The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.
Affected configurations
Node
googleidapythonRange≤1.5.2
ORgoogleidapythonMatch1.2.0
ORgoogleidapythonMatch1.4.0
ORgoogleidapythonMatch1.4.1
ORgoogleidapythonMatch1.4.2
ORgoogleidapythonMatch1.4.3
ORgoogleidapythonMatch1.5.0
ORgoogleidapythonMatch1.5.1
hex-raysidaMatch6.0pro
Related
nvd
nvd
CVE-2011-4783
2011-12-27 11:55:07
cvelist
cvelist
CVE-2011-4783
2011-12-27 11:00:00
msvr
msvr
prion
prion
Design/Logic Flaw
2011-12-27 11:55:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.028 Low
EPSS
Percentile
90.7%
Related for CVE-2011-4783