CVE-2007-0315 Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.c...
HighCVSS 9.3
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.cpp when storing settings in the registry, and (2) the transfer queue (QueueCtrl.cpp). NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| filezilla | <= 2.2.30 | No fix listed |
| filezilla | = 0.9.20 | No fix listed |
| filezilla | = 0.9.21 | No fix listed |
| filezilla | = 0.9.22 | No fix listed |
| filezilla | = 2.2.15 | No fix listed |
| filezilla | = 2.2.22 | No fix listed |
| filezilla | = 2.2.23 | No fix listed |
| filezilla | = 2.2.24 | No fix listed |
| filezilla | = 2.2.25 | No fix listed |
| filezilla | = 2.2.26 | No fix listed |
| filezilla | = 2.2.26a | No fix listed |
| filezilla | = 2.2.27 | No fix listed |
| filezilla | = 2.2.28 | No fix listed |
| filezilla | = 2.2.29 | No fix listed |
References
- sourceforge.net patch
- 22057 patch vdb-entry
- ADV-2007-0183 vdb-entry vendor-advisory
- filezilla-options-queuectrl-bo(31500) vdb-entry
- Debian Security Tracker CVE-2007-0315 vendor-advisory