CVE-2012-4992 Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.
HighCVSS 9.0
EPSS 17.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flashfxp | = 4.2 | No fix listed |
References
- 20120301 [Suspected Spam] FlashFXP v4.1.8.1701 - Buffer Overflow Vulnerability exploit mailing-list
- 79767 vdb-entry
- 20120301 lashFXP v4.1.8.1701 - Buffer Overflow Vulnerability exploit mailing-list
- 18555 exploit
- www.flashfxp.com
- 52259 vdb-entry
- www.vulnerability-lab.com
- flashfxp-tlistbox-bo(73626) vdb-entry