CVE-2016-4498

Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-4497

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

CVE-2016-4496

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service out-of-bounds write or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow...

Type confusion

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

Integer overflow

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service out-of-bounds write or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow...

CVE-2016-4497

Panasonic FPWIN Pro (versions 5.x–7.x up to 7.122/7.130) contains a type-confusion vulnerability in the project-file processing path (DeleteAndCreateSysRegDecls_And_SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap) that can lead to arbitrary code execution or a crash. The issue is triggered by lo...

CVE-2016-4497

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

CVE-2016-4498

CVE-2016-4498 affects Panasonic FPWIN Pro 5.x–7.x (up to version 7.130). The root cause is an uninitialized pointer access in the FPWIN Pro project processing (notably in CPlcSetting::Load per ZDI-16-332), which can crash the application and, per advisories, may enable code execution under certai...

CVE-2016-4496

CVE-2016-4496 affects Panasonic FPWIN Pro 5.x–7.x up to 7.130. The issue is in the project-file processing path (SelectFCS/ createLoadContent/ReleaseBuffer) where improper index/length handling allows a heap-buffer write, exploitable to achieve remote code execution (as described by ZDI advisorie...

CVE-2016-4496

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service out-of-bounds write or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow...

CVE-2016-4499

Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service application crash via unspecified vectors...

CVE-2016-4498

Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-4499

The CVE-2016-4499 issue affects Panasonic FPWIN Pro software (FPWIN Pro 5.x through 7.x, affected versions up to 7.130 per official advisories; CSCs list 7.122 and prior). The root cause is a heap-based buffer overflow in parsing/processing of FPWIN Pro project files, leading to crashes (local de...

Panasonic FPWIN Pro OPNISAMX Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsing of...

Panasonic FPWIN Pro GetBlock Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...

Panasonic FPWIN Pro CPlcSetting::Load Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...

Panasonic FPWIN Pro DeleteAndCreateSysRegDecls_And_SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...

Panasonic FPWIN Pro ReleaseBuffer Integer Overflow Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...

Panasonic FPWIN Pro SCTASK Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...

Panasonic FPWIN Pro SelectFCS Array Indexing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...