CVE-2007-1666: Datarescue Ida Pro

High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days.

The processor_request function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken place before invoking the perform_request function, which allows remote attackers to perform unauthorized actions.

Affected products

  • Datarescue Ida Pro: version 5.0 only; version 5.1 only

Published 2007-03-24. Last modified 2026-06-16.