CVE-2007-0330 Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary c...
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch ws ftp pro | = 2007 | No fix listed |
References
- 33476 vdb-entry
- 2160 third-party-advisory
- 20070112 Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability mailing-list
- 20070114 Re: Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability mailing-list
- 20070116 Re: Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability mailing-list
- 22062 vdb-entry