PT-2015-4221 · Hex Rays · Hex-Rays Ida Pro

Published 2015-01-02 · Updated 2019-04-15 · CVE-2014-9458

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions prior to 6.6 cumulative fix 2014-12-24

Description A heap-based buffer overflow issue exists in the GDB debugger module, allowing remote GDB servers to have an unspecified impact. The exact vectors of this issue are unknown.

Recommendations For versions prior to 6.6 cumulative fix 2014-12-24, update to the 6.6 cumulative fix 2014-12-24 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-9458

Affected Products

Hex-Rays Ida Pro

References · 5

• https://hex-rays.com/vulnfix.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9458 · Security Note
• https://hex-rays.com/bugbounty.shtml · Vendor Advisory
• http://secunia.com/advisories/61863 · Note
• http://securityfocus.com/bid/87981 · Note