Unscored CVE-2005-0770 EUVD-2005-0771GHSA-wjvc-3p76-7rm7

Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users …

Published Mar 18, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Format string vulnerability in DataRescue Interactive Disassembler and Debugger (IDA) Pro 4.7.0.830 allows remote attackers or local users to cause a denial of service (CPU consumption or application crash) and possibly execute arbitrary code via format string specifiers in a dynamic link library (DLL) name.

References

http://pb.specialised.info/all/adv/ida-debugger-adv.txt
http://www.datarescue.com/cgi-local/ultimatebb.cgi?ubb=get_topic%3Bf=2%3Bt=000155%3Bp=0
14610 third-party-advisory
20050316 ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability mailing-list