CVE-2016-20044

Name of the Vulnerable Software and Affected Versions PInfo versions 0.6.9 through 0.6.9-5.1

Description PInfo versions 0.6.9 through 0.6.9-5.1 contain a local buffer overflow vulnerability. Local attackers can execute arbitrary code by providing an oversized argument to the -m parameter. Attackers can create a malicious input string with 564 bytes of padding followed by a return address to overwrite the instruction pointer and execute shellcode with user privileges.

Recommendations PInfo version 0.6.9-5.1: Avoid providing oversized arguments to the -m parameter.