QwikSec

Security Database

CVE

CWE

Training

CVE-2016-10395

Published: Jun 15, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.

Vendor	Product	Versions
Flexera Software LLC	FlexNet Publisher	affected `Versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform`

References

https://secuniaresearch.flexerasoftware.com/advisories/76368/

x_refsource_MISC

https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager

x_refsource_CONFIRM

https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/

x_refsource_CONFIRM

https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/

x_refsource_CONFIRM

https://www.schneider-electric.com/en/download/document/SEVD-2018-046-01/

x_refsource_CONFIRM

https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.