Heap overflow

Heap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before 6.6 cumulative fix 2014-12-24 allows remote GDB servers to have unspecified impact via unknown vectors...

CVE-2014-9458

Hex-Rays IDA Pro before version 6.6 cumulative fix (2014-12-24) is affected by a heap-based buffer overflow in the GDB debugger module. This vulnerability could allow remote GDB servers to cause an unspecified impact via unknown vectors. Remediation: upgrade to IDA Pro 6.6 or later (per reference...

CVE-2014-9458

Heap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before 6.6 cumulative fix 2014-12-24 allows remote GDB servers to have unspecified impact via unknown vectors...

Multiple vulnerabilities in IDA Pro (CNVD-2014-09237)

IDA PRO abbreviation IDA Interactive Disassembler is an interactive disassembler. IDA Pro 6.6 and earlier versions contain several implementation vulnerabilities that could allow an attacker to take control of the affected system, a double-release in the kernel and a double-release error in the N...

IDA Pro Multiple Memory Corruption Vulnerabilities

The version of IDA Pro, an interactive disassembler installed on the remote host, is 6.5 or 6.6. It is, therefore, affected by memory corruption vulnerabilities. These vulnerabilities are mitigated by updated IDA loaders, which were not detected. By tricking a user into loading a specially crafte...

Реверс и отладка x64 [win]

Всем привет! В этой статье я хочу рассказать об инструментальных средствах отладки 64-х битных приложений под Windows, а именно об IDA Pro. Не будет долгих речей и вступлений, перейдём сразу к делу. При реверсе 32-х битных приложений, реверсеру предоставляется богатый выбор инструментальных...

Mozilla Firefox 3.6.16 mChannel Use-After-Free漏洞

漏洞分析 此漏洞是由于Mozilla Firefox的xul.dll在处理mChannel标签时，在OnChannelRedirect中对mChannel对象进行创建，但在随后调用Release释放，在释放对象过后没有对该指针进行标记，从而导致在随后的调用用中引用mChannel标签时，由于指针已经被释放，导致call地址不可读，从而引发漏洞，下面对此漏洞进行详细分析。 首先打开PoC，火狐浏览器崩溃，附加调试器，到达漏洞现场。 858.85c: Access violation - code c0000005 first chance First chance exceptions a...

FLARE IDA Pro Script Series: Automatic Recovery of Constructed Strings in Malware

The FireEye Labs Advanced Reverse Engineering FLARE Team is dedicated to sharing knowledge and tools with the community. We started with the release of the FLARE On Challenge in early July where thousands of reverse engineers and security enthusiasts participated. Stay tuned for a write-up of the...

IDA Pro 6.3 Crash PoC

No description provided by source. / IDA Pro 6.3 crash due an internal error ELF anti-debugging/reversing patcher Published @ IOActive Labs Research blog: http://blog.ioactive.com/2012/12/striking-back-gdb-and-ida-debuggers.html - nitr0us http://twitter.com/nitr0usmx Tested under: IDA Pro Starter...

IDA Kernel Database TIL Section Parsing Unspecified Issue

The version of IDA Pro, an interactive disassembler installed on the remote host, is 6.0 or newer. It is, therefore, reportedly affected by an unspecified vulnerability. This vulnerability is mitigated by an IDA plugin tilcheck.plw, which was not detected. By tricking a user into loading a...

[CrowdRE] Reverse Engineering Tool

A new project called CrowdRE aims to make it easy for the reverse engineering of complex applications working in collaboration with other users. Normally, the process reversing software from a complicated binary can consume much time, CrowdRE will help accelerate this process through teamwork...

IDA Pro IDB Loader Code Execution

The version of IDA Pro, an interactive disassembler installed on the remote host, is between versions 6.1 and 6.7. It is, therefore, affected by a code execution vulnerability. A remote attacker can exploit this, by convincing a user into loading a specially crafted IDB IDA database file into IDA...

PEStudio 3.69 - Denial of Service

Exploit for windows platform in category remote exploits Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on:...

IDA Pro 6.3 - Crash (PoC)

IDA Pro 6.3 - Crash PoC / IDA Pro 6.3 crash due an internal error ELF anti-debugging/reversing patcher Published @ IOActive Labs Research blog: http://blog.ioactive.com/2012/12/striking-back-gdb-and-ida-debuggers.html - nitr0us http://twitter.com/nitr0usmx Tested under: IDA Pro Starter License...

IDA Pro 6.3 - Crash (PoC)

/ IDA Pro 6.3 crash due an internal error ELF anti-debugging/reversing patcher Published @ IOActive Labs Research blog: http://blog.ioactive.com/2012/12/striking-back-gdb-and-ida-debuggers.html - nitr0us http://twitter.com/nitr0usmx Tested under: IDA Pro Starter License 6.3.120531 Mac OS X IDA Pr...

IDA Pro 6.3 Crash PoC

Exploit for multiple platform in category dos / poc / IDA Pro 6.3 crash due an internal error ELF anti-debugging/reversing patcher Published @ IOActive Labs Research blog: http://blog.ioactive.com/2012/12/striking-back-gdb-and-ida-debuggers.html - nitr0us http://twitter.com/nitr0usmx Tested under...

Startup CrowdStrike Launches Crowd-Sourced Platform for Malware Analysis

Venture funded startup CrowdStrike has launched a new platform that will allow security researchers to work collaboratively to reverse engineer and analyze malicious code. The new platform, CrowdRE, was designed to resemble conventional software version control systems, with features that allow...

CVE-2011-4783

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swigruntimedata files in the current working directory...

CVE-2011-4783

CVE-2011-4783 affects IDA Pro’s IDAPython plugin up to version 1.5.2.3. A crafted IDB file can trigger arbitrary code execution due to improper handling of swig_runtime_data in the current working directory, with an attacker leveraging user-assisted remote access. The vulnerability enables code e...

CVE-2011-4783

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swigruntimedata files in the current working directory...