Threats tagged 'ghsa-f88f-hghp-jjr6'

Hex-Rays IDA Pro versions 9.2 and 9.3 prior to 9.3sp2 have a vulnerability where Clang dependency-file generation is not properly blocked. This flaw allows an attacker to inject arguments that cause malicious code to be placed into a plugins directory if the victim opens a specially crafted .i64 file supplied by the attacker.