CVE-2015-8277

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Feb 24, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-82798.6Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP scriptCVE-2015-82807.5Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages.CVE-2015-82817.5Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem encryption via XOR calculations.CVE-2015-82829.8SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.CVE-2015-82836.5Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.CVE-2015-82848.8SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.CVE-2015-82857.5The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.CVE-2015-82869.8Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP porCVE-2015-82875.3Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch liCVE-2015-82885.9NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across CVE-2015-82897.5The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows reCVE-2015-82989.8Multiple SQL injection vulnerabilities in the login page in RXTEC RXAdmin UPDATE 06 / 2012 allow remote attackers to execute arbitrary SQL c