KLA10216 Multiple vulnerabilities in IDA Pro

Multiple critical vulnerabilities have been found in IDA Pro. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or conduct other unknown attacks.

Below is a complete list of vulnerabilities

1. Unspecified vulnerabilities can be exploited from unknown vectors;
2. An integer overflow can be exploited via unknown vectors;
3. A buffer overflow can be exploited remotely via a specially designed Mach-O file.

Original advisories

Related products

IDA-Pro

CVE list

CVE-2011-1053 warning

CVE-2011-1054 critical

CVE-2011-1049 high

CVE-2011-1050 critical

CVE-2011-1051 critical

CVE-2011-1052 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Hex-Rays IDA Pro versions 5.7 and 6.0