IDA Pro WinDbg plugin and Hint Calculation Vulnerability

Release date:
Updated on: 2013-07-31

Affected Systems:
Hex-Rays IDA Pro 6.2
Hex-Rays IDA Pro 6.0
Hex-Rays IDA Pro 5.7
Description:
--------------------------------------------------------------------------------
Bugtraq id: 61521

Ida pro (IDA) is an Interactive Disassembly tool.

When IDA Pro 4.6 and earlier versions parse specially crafted database files, there is an automatic exit error in WinDbg plug-in and hint calculation, and the impact is unknown.

<* Source: Masaaki Chida

Link: http://secunia.com/advisories/54001/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Hex-Rays
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.hex-rays.com/products/ida/index.shtml
Https://www.hex-rays.com/vulnfix.shtml
Https://www.hex-rays.com/bugbounty.shtml