PT-2016-3264

CVE-2017-9634

·

تاريخ النشر

2016-06-01

·

تاريخ التحديث

2019-10-09

الوصف من

CVSS 3.1
10
حرجة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mitsubishi E-Designer version 7.52 Build 344
Description The issue is related to a buffer overflow in memory when processing certain sections of a project file (.mpa), which can be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash. An attacker can exploit this issue remotely by using a specially crafted file or web page, potentially allowing them to execute code as an administrator or cause a denial of service.
Recommendations For Mitsubishi E-Designer version 7.52 Build 344, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ZDI-17-506
ZDI-17-507
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾