Title: OllyDBG 'ollydbg.ini' Debug Argument Local Buffer Overflow Vulnerability
Severity: MODERATE
Description:
OllyDBG is a debugging application.
OllyDBG is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue affects the 'Argument' data supplied to 'ollydbg.ini' and may be triggered when the application processes data in excess of 262 bytes.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
OllyDBG v1.10 is vulnerable; other versions may also be affected.
Affected Products:
- OllyDbg OllyDbg 1.10
- OllyDbg OllyDbg 1.10.0
References:
- OllyDbg: OllyDbg Homepage