Summaryinfo

A vulnerability was found in Hex-Rays SA IDA Pro up to 6.3 and classified as critical. Impacted is the function qrealloc of the component Btree Database Engine. The manipulation results in memory corruption. There is no available exploit. It is best practice to apply a patch to resolve this issue.

Detailsinfo

A vulnerability classified as critical has been found in Hex-Rays SA IDA Pro up to 6.3. Affected is the function qrealloc of the component Btree Database Engine. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was presented 05/15/2013 by Corey Kallenberg as not defined changelog entry (Website). The advisory is available at hex-rays.com. The public release was coordinated in cooperation with the vendor. The exploitability is told to be difficult. Local access is required to approach this attack. The exploitation doesn't require any form of authentication. Technical details are known, but there is no available exploit.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at hex-rays.com. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at OSVDB (93561†) and Secunia (SA53526†). See VDB-8836, VDB-8837, VDB-9525 and VDB-9814 for similar entries. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Hex-Rays SA

Name

• IDA Pro

Version

• 6.0
• 6.1
• 6.2
• 6.3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion