CVE-2011-1050

Hex-Rays IDA Pro versions 5.7 and 6.0 are affected by CVE-2011-1050. The description notes an unspecified vulnerability with unknown impact and attack vectors related to the conversion of string encodings and inconsistencies in the handling of UTF-8 sequences in the user interface. OpenVAS and re...

CVE-2011-1051

Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation...

CVE-2011-1050

Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...

PT-2011-2837

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to an integer overflow in the COFF/EPOC/EXPLOAD input file loaders, which has unknown impact and attack vectors. This is connected to memory allocation. Recommendations...

CVE-2011-1052: Undefined Security Weakness

Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation...

CVE-2011-1049: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Macho-O file...

PT-2011-2836

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to the conversion of string encodings and inconsistencies in the handling of UTF8 sequences by the user interface, but the impact and attack vectors are unknown...

CVE-2011-1053: Undefined Security Weakness

Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service out-of-memory exception and inability to analyze code via a crafted Mach-O file...

CVE-2011-1054: Undefined Security Weakness

Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors...

KLA10216 Multiple vulnerabilities in IDA Pro

Multiple critical vulnerabilities have been found in IDA Pro. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or conduct other unknown attacks. Below is a complete list of vulnerabilities 1. Unspecified vulnerabilities can be exploited from...

PT-2011-2838

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to an integer overflow in the PSX/GEOS input file loaders, which has unknown impact and attack vectors. This is connected to memory allocation. Recommendations For...

PT-2011-2839

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to an unspecified vulnerability in the Mach-O input file loader, which allows user-assisted remote attackers to cause a denial of service. This can result in an...

CVE-2011-1050: Undefined Security Weakness

Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...

PT-2011-2835

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to a buffer overflow in the Mach-O input file loader, which can be exploited by user-assisted remote attackers using a crafted Mach-O file. This could lead to a denial ...

PT-2011-2840

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue concerns an unspecified vulnerability in the PEF input file loader. Details about the impact and attack vectors of this issue are not provided. Recommendations For Hex-Rays IDA Pr...

CVE-2011-1051: Undefined Security Weakness

Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation...

IDA Pro QNX文件加载器拒绝服务漏洞

IDA Pro是非常流行的静态反编译软件。 IDA Pro使用了不同的文件加载器来反汇编不同格式的文件，其中QNX文件加载器中的漏洞可能触发死循环，导致耗尽100%的CPU资源，无法继续进行反汇编。 以下for循环用于对输入文件中的每个lmfdata结构都进行一次迭代，根据sizeoflmfdata + lmfdata.offset向前移动文件指针。但如果lmfdata.offset == -sizeoflmfdata，由于没有增加，因此代码会陷入死循环： From \ldr\qnx\qnx.cpp50: foruint32 at =...