Improper input validation in Google Idapython
CVE-2011-4783
The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.017 (82.5th percentile) — read the EPSS interpretation.
Affected products
- Google Idapython — versions 1.2.0, 1.4.0, 1.4.1
- Hex-rays Ida — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- 47295 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- idapro-idb-code-execution(71936) (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_MISC)