Description
In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Flexera Software LLC FlexNet Publisher
Versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platformaffected
References
- https://secuniaresearch.flexerasoftware.com/advisories/76368/ ↗
- https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager ↗
- https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/ ↗
- https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/ ↗
- https://www.schneider-electric.com/en/download/document/SEVD-2018-046-01/ ↗
- https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01 ↗