CVE-2021-22545

HIGH

7.5

Description

An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade BinDiff 7

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteHIGH

Privileges requisLOW

Interaction utilisateurREQUIRED

Publie6/29/2021

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

google:bindiff

Faiblesses (CWE)

CWE-416CWE-416

References

https://www.zynamics.com/bindiff/manual/index.html#nyyyy7(cve-coordination@google.com)

https://www.zynamics.com/bindiff/manual/index.html#nyyyy7(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.