PT-2011-2838

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to an integer overflow in the PSX/GEOS input file loaders, which has unknown impact and attack vectors. This is connected to memory allocation. Recommendations For...

PT-2011-2835

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to a buffer overflow in the Mach-O input file loader, which can be exploited by user-assisted remote attackers using a crafted Mach-O file. This could lead to a denial ...

PT-2011-2836

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to the conversion of string encodings and inconsistencies in the handling of UTF8 sequences by the user interface, but the impact and attack vectors are unknown...

PT-2011-2840

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue concerns an unspecified vulnerability in the PEF input file loader. Details about the impact and attack vectors of this issue are not provided. Recommendations For Hex-Rays IDA Pr...

CVE-2011-1053: Undefined Security Weakness

Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service out-of-memory exception and inability to analyze code via a crafted Mach-O file...

CVE-2011-1050: Undefined Security Weakness

Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...

CVE-2011-1049: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Macho-O file...

CVE-2011-1051: Undefined Security Weakness

Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation...

CVE-2011-1054: Undefined Security Weakness

Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors...

CVE-2011-1052: Undefined Security Weakness

Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation...

KLA10216 Multiple vulnerabilities in IDA Pro

Multiple critical vulnerabilities have been found in IDA Pro. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or conduct other unknown attacks. Below is a complete list of vulnerabilities 1. Unspecified vulnerabilities can be exploited from...

PT-2011-2839

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to an unspecified vulnerability in the Mach-O input file loader, which allows user-assisted remote attackers to cause a denial of service. This can result in an...

VERA v0.3 - Visualizing Executables for Reversing and Analysis tool !

"VERA is a Visualizing Executables for Reversing and Analysis tool. It is a tool for reverse engineering Windows executables. It is used in conjunction with the Ether framework to generate visualizations to help with the RE process." This is the official change log: Added processing of trace file...

Reversing Stuxnet's Rootkit Into C++ , Download !

This is the first time Mr. Amr Thabet from Egypt , student at Alexandria University Faculty of Engineering Mechanical Department , reverse a rootkit. He choose Stuxnet Rootkit as it's a famous virus and begin reversing.. Finally now he convert it into C++ code with a commented IDA Pro v.5.1...

IDA Pro Mach-O Loader Buffer Overflow

The version of IDA Pro, an interactive disassembler, installed on the remote host is either 5.7 or 6.0 and includes a version of the Mach-O loader that is affected by a buffer overflow vulnerability. By tricking a user into opening a specially crafted Mac OS X Mach-O file using the affected loade...

Plugins Dll Hijacking Exploit

Exploit for windows platform in category local exploits ============================= Plugins Dll Hijacking Exploit ============================= Exploit Title: Dll Hijacking Exploit Application: Application plugin support Date: 07 Sept 2010 Author: STRELiTZIA Version: %Applications list% Tested...

httpdx - 'tolog()' Format String (Metasploit) (1)

$Id: httpdxtologformat.rb 10150 2010-08-25 20:55:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IDA Pro QNX File Loader Denial of Service

The version of IDA Pro, an interactive disassembler, installed on the remote host is older than 5.7. Such versions are reportedly affected by an integer overflow when loading QNX files. By tricking a user into loading a specially crafted QNX file in IDA Pro, it may be possible for the attacker to...

IDA Pro QNX文件加载器拒绝服务漏洞

IDA Pro是非常流行的静态反编译软件。 IDA Pro使用了不同的文件加载器来反汇编不同格式的文件，其中QNX文件加载器中的漏洞可能触发死循环，导致耗尽100%的CPU资源，无法继续进行反汇编。 以下for循环用于对输入文件中的每个lmfdata结构都进行一次迭代，根据sizeoflmfdata + lmfdata.offset向前移动文件指针。但如果lmfdata.offset == -sizeoflmfdata，由于没有增加，因此代码会陷入死循环： From \ldr\qnx\qnx.cpp50: foruint32 at =...

IDA Pro Denial Of Service

Denial-of-Service Vulnerability in IDA Pro ------------------------------------------ June 28th, 2010 ======= Summary ======= Name: Denial-of-Service Vulnerability in IDA Pro Release Date: June 28th, 2010 Discoverer: Jason Geffner Version Affected: IDA Pro 3.76 through 5.6 Risk: Low Status:...