CVE-2011-1049

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-02-21 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Macho-O file.

Affected products

Hex-Rays IDA: 5.7, 6.0

References

http://osvdb.org/70846
http://secunia.com/advisories/43190
http://www.vupen.com/english/advisories/2011/0357
https://www.hex-rays.com/vulnfix.shtml
http://osvdb.org/70846
http://secunia.com/advisories/43190
http://www.vupen.com/english/advisories/2011/0357
https://www.hex-rays.com/vulnfix.shtml

Get alerted when CVE-2011-1049 or the next vulnerability affects your stack