Lucene search

K
nvd[email protected]NVD:CVE-2011-4783
HistoryDec 27, 2011 - 11:55 a.m.

CVE-2011-4783

2011-12-2711:55:07
CWE-20
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.

Affected configurations

NVD
Node
googleidapythonRange1.5.2
OR
googleidapythonMatch1.2.0
OR
googleidapythonMatch1.4.0
OR
googleidapythonMatch1.4.1
OR
googleidapythonMatch1.4.2
OR
googleidapythonMatch1.4.3
OR
googleidapythonMatch1.5.0
OR
googleidapythonMatch1.5.1
AND
hex-raysidaMatch6.0pro

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

Related for NVD:CVE-2011-4783