CVE:CVE-2016-2292
CNNVD:CNNVD-201604-029
Pro-face GP-Pro EX是美国Pro-face公司的一套HMI画面编辑和逻辑编程软件。
Pro-face GP-Pro EX中存在基于栈的缓冲区溢出漏洞。远程攻击者可利用该漏洞在进程上下文中执行任意代码。以下型号及版本受到影响：Pro-face GP-Pro EX EX-ED，PFXEXEDV，PFXEXEDLS，PFXEXGRPLS 1.00版本至4.0.4版本。
solution:Upgrade schneider-electric proface_gp-pro_ex_ex-ed to a higher version than 4.0.4,and avoid the version (,4.0.4]; Upgrade schneider-electric proface_gp-pro_ex_pfxexedls to a higher version than 4.0.4,and avoid the version (,4.0.4]; Upgrade schneider-electric proface_gp-pro_ex_pfxexedv to a higher version than 4.0.4,and avoid the version (,4.0.4]; Upgrade schneider-electric proface_gp-pro_ex_pfxexgrpls to a higher version than 4.0.4,and avoid the version (,4.0.4]