Description
Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be executed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fujitsu Client Computing | UpdateNavi | V1.4 L10 to L33 | — |
| Fujitsu Client Computing | UpdateNaviInstallService | Service 1.2.0091 to 1.2.0125 | — |