CVE-2016-4519: Buffer Overflow
Published Jun 25, 2016
·Updated
Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.
Affected Software
1 affected component
Unitronics VisiLogic OPLC IDE<=9.8.22
Event History
Jun 25, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4519?
CVE-2016-4519 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2016-4519?
To mitigate CVE-2016-4519, upgrade the Unitronics VisiLogic OPLC IDE to version 9.8.30 or later.
3
Who is affected by CVE-2016-4519?
CVE-2016-4519 affects users of Unitronics VisiLogic OPLC IDE versions prior to 9.8.30.
4
What type of attack does CVE-2016-4519 enable?
CVE-2016-4519 enables remote attackers to execute arbitrary code by exploiting a stack-based buffer overflow.
5
What input vector is targeted in CVE-2016-4519?
CVE-2016-4519 is exploited through a crafted filename field in a ZIP archive contained within a vlp file.