Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2016-20044

PInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter

Description

PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Attackers can craft a malicious input string with 564 bytes of padding followed by a return address to overwrite the instruction pointer and execute shellcode with user privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pinfo PInfo

  • 0.6.9-5.1affected

References