CVE ID | CVE-2015-4647 |
CVSS SCORE | 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Panasonic |
AFFECTED PRODUCTS |
Security API |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['19546']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The specific flaw exists in the FilePassword property. By setting FilePassword to a very large string, an attacker can cause a fixed-length stack buffer to overflow. An attacker could leverage this vulnerability to execute code under the context of the current process. |
ADDITIONAL DETAILS |
Panasonic has issued an update to correct this vulnerability. More details can be found at:
http://security.panasonic.com/pss/security/library/developer.html#SDK |
DISCLOSURE TIMELINE |
|
CREDIT | Ariele Caltabiano (kimiya) |