Lucene search

K
zdiXina1iZDI-22-387
HistoryFeb 22, 2022 - 12:00 a.m.

(0Day) Fuji Electric Alpha5 C5V File Parsing Uninitialized Pointer Information Disclosure Vulnerability

2022-02-2200:00:00
xina1i
www.zerodayinitiative.com
16
remote attackers
sensitive information disclosure
fuji electric alpha5
user interaction
malicious file
c5v files
pointer initialization
arbitrary code execution

EPSS

0.001

Percentile

40.8%

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fuji Electric Alpha5. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of C5V files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.

EPSS

0.001

Percentile

40.8%

Related for ZDI-22-387