CVE-2011-4783
IDAPython < 1.5.2.3 - Remote Code Execution via Crafted IDB File
Title source: llmDescription
The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.
References (5)
Core 5
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/47295
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71936
Issue Tracking x_refsource_confirm
http://code.google.com/p/idapython/source/detail?r=361
Patch x_refsource_confirm
http://code.google.com/p/idapython/downloads/detail?name=idapython-1.5.2.3_ida6.1_py2.6_win32.zip
Vendor Advisory x_refsource_misc
http://technet.microsoft.com/en-us/security/msvr/msvr11-015
Scores
EPSS
0.0479
EPSS Percentile
90.9%
Details
CWE
CWE-20
Status
published
Products (8)
google/idapython
1.2.0
google/idapython
1.4.0
google/idapython
1.4.1
google/idapython
1.4.2
google/idapython
1.4.3
google/idapython
1.5.0
google/idapython
1.5.1
google/idapython
< 1.5.2
Published
Dec 27, 2011
Tracked Since
Feb 18, 2026