2

I noticed that Hex-Ray have been keeping reward to people who find "security vulnerabilities" of IDA-Pro.:

So here is my question, how come a decompiler can have "security vulnerabilities"? And more importantly, is there any real-world example to attack decompilers or disassemblers? Or can I perform certain kind of "malware evading attacks" by abusing the decompiler bugs?

| improve this question | |
  • 2
    How about a vulnerability that, given a suitably crafted malware, results in execution of code in the malware being studied ? – Ian Cook Oct 14 '19 at 7:55
  • 1
    For examples, see hex-rays.com/vulnfix.shtml – julian♦ Oct 14 '19 at 7:57
2

I guess that you won't be happy if, while analyzing a malware, a certain pattern in the executable binary makes Hex-rays connect to an evil server somewhere in the World with your account and download a payload on your system...

And, yes, there have been some examples where security analysis software have been pinpointed with security threats. The last I have in mind are on Ghidra:

See also here.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.