CVE-2015-8277

Critical

Published: 24/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple buffer overflows in lmgrd and Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode 0x107 or 0x10a.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update Flexera FlexNet Publisher to version 11.13.1.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a.