CVE-2005-0770 Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application....
HighCVSS 7.5
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datarescue ida pro | = 4.7.0.830 | No fix listed |
References
- 20050316 ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability mailing-list
- pb.specialised.info exploit
- 14610 patch third-party-advisory vendor-advisory
- www.datarescue.com