Integer overflow

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service out-of-bounds write or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow...

CVE-2016-4499

The CVE-2016-4499 issue affects Panasonic FPWIN Pro software (FPWIN Pro 5.x through 7.x, affected versions up to 7.130 per official advisories; CSCs list 7.122 and prior). The root cause is a heap-based buffer overflow in parsing/processing of FPWIN Pro project files, leading to crashes (local de...

CVE-2016-4497

Panasonic FPWIN Pro (versions 5.x–7.x up to 7.122/7.130) contains a type-confusion vulnerability in the project-file processing path (DeleteAndCreateSysRegDecls_And_SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap) that can lead to arbitrary code execution or a crash. The issue is triggered by lo...

CVE-2016-4498

Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-4498

CVE-2016-4498 affects Panasonic FPWIN Pro 5.x–7.x (up to version 7.130). The root cause is an uninitialized pointer access in the FPWIN Pro project processing (notably in CPlcSetting::Load per ZDI-16-332), which can crash the application and, per advisories, may enable code execution under certai...

CVE-2016-4497

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

CVE-2016-4499

Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service application crash via unspecified vectors...

CVE-2016-4496

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service out-of-bounds write or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow...

CVE-2016-4496

CVE-2016-4496 affects Panasonic FPWIN Pro 5.x–7.x up to 7.130. The issue is in the project-file processing path (SelectFCS/ createLoadContent/ReleaseBuffer) where improper index/length handling allows a heap-buffer write, exploitable to achieve remote code execution (as described by ZDI advisorie...

CVE-2016-4497: Improper Input Validation

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

CVE-2016-4498: Improper Input Validation

Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-4499: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service application crash via unspecified vectors...

CVE-2016-4496: Improper Restriction of Operations within the Bounds of a Memory Buffer

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service out-of-bounds write or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow...

PT-2016-5980

Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 5.x through 7.x before 7.130 Description The issue allows local users to cause a denial of service or possibly have unspecified other impact. It is related to "type confusion" and can be leveraged via certain...

PT-2016-5981

Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 5.x through 7.x before 7.130 Description The issue allows local users to cause a denial of service or possibly have unspecified other impact via unknown vectors due to the software accessing an uninitialized pointe...

PT-2016-5979

Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 5.x through 7.x before 7.130 Description The issue allows local users to cause a denial of service or possibly have other impact by triggering a crafted index value, as demonstrated by an integer overflow. This can...

Panasonic FPWIN Pro OPNISAMX Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsing of...

Panasonic FPWIN Pro ReleaseBuffer Integer Overflow Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...

Panasonic FPWIN Pro createLoadContent Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...

Panasonic FPWIN Pro CPlcSetting::Load Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing o...