CVE-2016-20044

CVE-2016-20044 identifies a local buffer overflow vulnerability in PInfo version 0.6.9-5.1, which allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Rated 8.4 HIGH on CVSS, this flaw has a local attack vector and low attack complexity, enabling an attacker to achieve arbitrary code execution with user privileges, resulting in high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, no public exploit code available in common frameworks, and only minimal community discussion has been observed.