漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Use-after-free in BinDiff
Vulnerability Description
An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade BinDiff 7
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
释放后使用
Vulnerability Title
BinDiff 资源管理错误漏洞
Vulnerability Description
BinDiff是一款二进制文件分析和对比的工具。 BinDiff 存在安全漏洞,攻击者可利用该漏洞创建一个特定的IdaPro *.i64文件将导致BinDiff插件加载一个无效的内存偏移量。该漏洞允许攻击者控制指令指针并执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A