CVE-2016-4499 Information

Description

Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (application crash) via unspecified vectors.

CVSS Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

Reference

http://www.securityfocus.com/bid/90522 http://zerodayinitiative.com/advisories/ZDI-16-330/ http://zerodayinitiative.com/advisories/ZDI-16-331/ https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction Required

LOW

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

LOW

Base Severity

4.2