PT-2016-3264

CVE-2017-9634

·

Published

2016-06-01

·

Updated

2019-10-09

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mitsubishi E-Designer version 7.52 Build 344
Description The issue is related to a buffer overflow in memory when processing certain sections of a project file (.mpa), which can be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash. An attacker can exploit this issue remotely by using a specially crafted file or web page, potentially allowing them to execute code as an administrator or cause a denial of service.
Recommendations For Mitsubishi E-Designer version 7.52 Build 344, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ZDI-17-506
ZDI-17-507
Found an issue in the description? Have something to add? Feel free to write us 👾