PT-2016-5980

CVE-2016-4497

·

Publicado

2016-05-11

·

Atualizado

2016-11-28

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 5.x through 7.x before 7.130
Description The issue allows local users to cause a denial of service or possibly have unspecified other impact. It is related to "type confusion" and can be leveraged via certain vectors. There is also a mention of a Type Confusion Remote Code Execution Vulnerability, but details about real-world incidents or the estimated number of potentially affected devices are not provided.
Recommendations For versions 5.x through 7.x before 7.130, update to version 7.130 or later to resolve the issue. As a temporary workaround, consider restricting access to the DeleteAndCreateSysRegDecls And SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap function until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ZDI-16-334
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾