OllyDBG is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in an integer overflow. When parsing a specially crafted table in a portable executable file, a context-dependent attacker can potentially execute arbitrary code.

Upgrade to version 2.01 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1026981
• Secunia Advisory ID: 48834
• Generic Exploit URL: http://code.google.com/p/ollybugs/downloads/detail?name=you.exe&can=2&q=
• Other Advisory URL: http://code.google.com/p/ollybugs/downloads/list
  http://waleedassar.blogspot.com/2012/03/ollydbg-resource-table-parsing-integer.html
• Vendor URL: http://www.ollydbg.de/

• waliedassar - waliedassar

NVD does not currently have a CVSSv2 score assigned.