Heap-based Buffer Overflow in Panasonic FPWIN Pro Software
CVE-2016-4499

4.2MEDIUM

Key Information:

Vendor

Panasonic

Status
Fpwin Pro
Vendor
CVE Published:
12 May 2016

What is CVE-2016-4499?

A heap-based buffer overflow vulnerability exists in versions 5.x through 7.x before 7.130 of Panasonic's FPWIN Pro software. This flaw enables local users to exploit specific vectors that can lead to an application crash, effectively causing a denial of service. Users and administrators of affected FPWIN Pro versions should apply updates or mitigations to guard against potential exploits targeting this vulnerability.

References

http://zerodayinitiative.com/advisories/ZDI-16-330/
x_refsource_MISC
http://www.securityfocus.com/bid/90522
vdb-entryx_refsource_BID
http://zerodayinitiative.com/advisories/ZDI-16-331/
x_refsource_MISC

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.