ZDI-CAN-7850: Panasonic Control FPWIN PRO Project File Parsing sc_obj Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic Control FPWin Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PRO files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-7850?
The severity of ZDI-CAN-7850 is categorized as critical due to its potential for arbitrary code execution.
How do I fix ZDI-CAN-7850?
To fix ZDI-CAN-7850, ensure that you update Panasonic Control FPWin Pro to the latest version provided by the vendor.
What type of attack can exploit ZDI-CAN-7850?
ZDI-CAN-7850 can be exploited through remote attacks which require user interaction, such as visiting a malicious website or opening a harmful file.
What versions of Panasonic Control FPWin Pro are affected by ZDI-CAN-7850?
ZDI-CAN-7850 affects specific versions of Panasonic Control FPWin Pro that have not been patched against this vulnerability.
Is user interaction necessary for ZDI-CAN-7850 exploitation?
Yes, user interaction is necessary for the exploitation of ZDI-CAN-7850, requiring victims to engage with a malicious page or file.