CVE-2016-10395 - CVE House
Back to Database
Status published High CVE-2016-10395

In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet...

Vulnerability Description

In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-10395

Credits & Attribution

No credits recorded in the NVD database.

References

More from Flexera Software LLC

View All →
CVE-2018-5819
An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions...
High 7.5
CVE-2018-5817
A type confusion error within the "unpacked_load_raw()" function within LibRaw...
High 7.5
CVE-2018-20034
A Denial of Service vulnerability related to adding an item...
High 7.5
CVE-2018-20033
A Remote Code Execution vulnerability in lmgrd and vendor daemon...
Critical 9.8
CVE-2018-20032
A Denial of Service vulnerability related to message decoding in...
High 7.5

Affected Vendor

Flexera Software LLC

View all reports →

Affected Software

FlexNet Publisher
Vulnerable Versions:
Versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform

Timeline

Official Publish: June 15th, 2017
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.