PT-2015-4221 · Hex Rays · Hex-Rays Ida Pro

Publicado 2015-01-02 · Atualizado 2019-04-15 · CVE-2014-9458

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions prior to 6.6 cumulative fix 2014-12-24

Description A heap-based buffer overflow issue exists in the GDB debugger module, allowing remote GDB servers to have an unspecified impact. The exact vectors of this issue are unknown.

Recommendations For versions prior to 6.6 cumulative fix 2014-12-24, update to the 6.6 cumulative fix 2014-12-24 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-9458

Produtos afetados

Hex-Rays Ida Pro

Referências · 5

• https://hex-rays.com/vulnfix.shtml · Aviso do Fabricante
• http://secunia.com/advisories/61863 · Nota
• http://securityfocus.com/bid/87981 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9458 · Nota de Segurança
• https://hex-rays.com/bugbounty.shtml · Aviso do Fabricante