CVE-2011-4783 The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files i...
HighCVSS 9.3
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google idapython | <= 1.5.2 | No fix listed |
| Google idapython | = 1.2.0 | No fix listed |
| Google idapython | = 1.4.0 | No fix listed |
| Google idapython | = 1.4.1 | No fix listed |
| Google idapython | = 1.4.2 | No fix listed |
| Google idapython | = 1.4.3 | No fix listed |
| Google idapython | = 1.5.0 | No fix listed |
| Google idapython | = 1.5.1 | No fix listed |
References
- code.google.com patch
- code.google.com
- 47295 third-party-advisory vendor-advisory
- technet.microsoft.com
- idapro-idb-code-execution(71936) vdb-entry