CVE-2011-4134 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Flexnet Publisher

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

10.0CRITICALNVD

EPSS

9.1%

top 7.33%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Flexerasoftware Flexnet Publisher

Timeline

PublishedJan 19

Latest updateMay 17

Description

Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDflexerasoftware/flexnet_publisher11.10

🔴Vulnerability Details

GHSA

GHSA-cvqv-p8vx-m5h8: Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11↗2022-05-17

▶

CVEList

CVE-2011-4134: Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11↗2012-01-19

▶

💥Exploits & PoCs

Exploit-DB

X.Org xorg 1.4 < 1.11.2 - File Permission Change↗2011-10-28

▶