CVE-2016-4496

CVE-2016-4496 affects Panasonic FPWIN Pro 5.x–7.x up to 7.130. The issue is in the project-file processing path (SelectFCS/ createLoadContent/ReleaseBuffer) where improper index/length handling allows a heap-buffer write, exploitable to achieve remote code execution (as described by ZDI advisorie...

Panasonic FPWIN Pro Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from Trend Micro’s Zero Day Initiative ZDI concerning buffer overflow vulnerabilities in Panasonic FPWIN Pro software. These vulnerabilities were reported to ZDI by security researcher Steven Seeley. Panasonic has produced a new version to mitigate these...