CVE-2016-4496

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow.

Score

CVSS 3.0 4.2 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-05-12

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Fpwin Pro (Panasonic)

References

• http://www.securityfocus.com/bid/90520
• http://zerodayinitiative.com/advisories/ZDI-16-333/
• http://zerodayinitiative.com/advisories/ZDI-16-335/
• http://zerodayinitiative.com/advisories/ZDI-16-336/
• http://zerodayinitiative.com/advisories/ZDI-16-337/
• https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01