CVE-2016-10395 In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licens...
HighCVSS 7.8
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flexerasoftware flexnet publisher | <= 11.14.1 | No fix listed |
| Flexera Software FlexNet Publisher | = Versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform | No fix listed |
References
- ics-cert.us-cert.gov
- secuniaresearch.flexerasoftware.com permissions-required third-party-advisory
- www.citect.schneider-electric.com
- www.schneider-electric.com
- www.schneider-electric.com
- www.schneider-electric.com