Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are directly provided to the OutputDebugString function call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OllyDbg Debugger消息格式串处理漏洞
Vulnerability Description
OllyDbg是一个32位汇编级的直观的分析调试器。 OllyDbg在处理调式包含格式串的消息时存在问题，被跟踪的应用程序可以使OllyDbg崩溃，或可能以进程权限执行任意指令。 OllyDbg跟踪一进程并允许用户自定义会话，如是否跟踪或设置断点等。其中OutputDebugString函数可发送字符串到调试器上，然后OllyDbg会在底端显相关状态消息，但是如果包含格式串消息，就可能使OllyDbg崩溃。精心构建提交数据可能以进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A