PT-2016-5980

CVE-2016-4497

·

تاريخ النشر

2016-05-11

·

تاريخ التحديث

2016-11-28

الوصف من

CVSS 2.0
6.8
متوسطة
المقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 5.x through 7.x before 7.130
Description The issue allows local users to cause a denial of service or possibly have unspecified other impact. It is related to "type confusion" and can be leveraged via certain vectors. There is also a mention of a Type Confusion Remote Code Execution Vulnerability, but details about real-world incidents or the estimated number of potentially affected devices are not provided.
Recommendations For versions 5.x through 7.x before 7.130, update to version 7.130 or later to resolve the issue. As a temporary workaround, consider restricting access to the DeleteAndCreateSysRegDecls And SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap function until a patch is available.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ZDI-16-334
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾