CVE-2005-0115: Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execut...

Security readout for executives and security teams

This is an old vulnerability in DataRescue IDA Pro 4.7. A specially crafted Windows PE file could crash the tool or run attacker-controlled code when analyzed. The business risk is concentrated in reverse-engineering, malware analysis, and security research teams that may open untrusted executables. Exposure is likely limited to systems still running DataRescue Interactive Disassembler Pro 4.7 and using it to inspect untrusted PE files. Modern deployments or different versions are not confirmed affected by the supplied bundle. Treat as a targeted legacy-tool risk, not a broad enterprise emergency. Prioritize teams that analyze malware or third-party executables, because compromise of analyst workstations can expose sensitive investigations and internal credentials. Mitigation focus: Inventory systems for IDA Pro 4.7 or archived DataRescue installations.; Check vendor or trusted archived guidance for the corrected version or supported replacement.; Avoid analyzing untrusted PE files with IDA Pro 4.7..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.