« Volver al listado

CVE-2011-4783

Estado: ModificadaAlta (9.3)—

The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Google — Idapython

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-4783",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-12-27T11:55:07.593",
  "references": [
    {
      "url": "http://code.google.com/p/idapython/downloads/detail?name=idapython-1.5.2.3_ida6.1_py2.6_win32.zip",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://code.google.com/p/idapython/source/detail?r=361",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/47295",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://technet.microsoft.com/en-us/security/msvr/msvr11-015",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71936",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://code.google.com/p/idapython/downloads/detail?name=idapython-1.5.2.3_ida6.1_py2.6_win32.zip",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://code.google.com/p/idapython/source/detail?r=361",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/47295",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://technet.microsoft.com/en-us/security/msvr/msvr11-015",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71936",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory."
    },
    {
      "lang": "es",
      "value": "El componente IDAPython en versiones anteriores a 1.5.2.3 de IDA Pro permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario a través de un archivo IDB modificado, relacionado con un manejo inapropiado de determinados archivos swig_runtime_data files en el directorio de trabajo actual."
    }
  ],
  "lastModified": "2026-06-16T23:35:24.433",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:google:idapython:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4E2761E-96C1-4603-9C2D-B97EDCC54B5E",
              "versionEndIncluding": "1.5.2"
            },
            {
              "criteria": "cpe:2.3:a:google:idapython:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F00323E-22AB-4DBF-9258-1A27F1269EFD"
            },
            {
              "criteria": "cpe:2.3:a:google:idapython:1.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC5E829C-5192-4437-B119-5C576C09E708"
            },
            {
              "criteria": "cpe:2.3:a:google:idapython:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCBA2D85-DA64-4C6B-8E50-D44811EBD66A"
            },
            {
              "criteria": "cpe:2.3:a:google:idapython:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94AC3263-34A4-441E-ADF0-7DCD205E8D29"
            },
            {
              "criteria": "cpe:2.3:a:google:idapython:1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36781596-AA0B-4907-B590-4B7E8047E251"
            },
            {
              "criteria": "cpe:2.3:a:google:idapython:1.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4E17AD3-2F0A-407E-88C3-7A6709D29396"
            },
            {
              "criteria": "cpe:2.3:a:google:idapython:1.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B8F0BBE-5515-4C34-ACD1-5CF452429158"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hex-rays:ida:6.0:*:pro:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7D38278F-851F-4C57-9163-23E151930358"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}