PT-2011-2835
CVE-2011-1049
·
Published
2011-02-21
·
Updated
2011-02-22
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Hex-Rays IDA Pro versions 5.7 through 6.0
Description
The issue is related to a buffer overflow in the Mach-O input file loader, which can be exploited by user-assisted remote attackers using a crafted Mach-O file. This could lead to a denial of service, causing the program to crash, and potentially allow the execution of arbitrary code.
Recommendations
For versions 5.7 through 6.0, update to a version that includes a fix for the buffer overflow issue in the Mach-O input file loader.
Found an issue in the description? Have something to add? Feel free to write us 👾