CVE-2016-15003 FileZilla Client Installer uninstall.exe unquoted search path
HighCVSS 7.8
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| filezilla-project FileZilla Client | = 3.17.0 | No fix listed |
| filezilla Client | = 3.17.0.0 | No fix listed |
References
- vuldb.com third-party-advisory
- www.exploit-db.com exploit third-party-advisory vdb-entry
- youtu.be exploit third-party-advisory
- Debian Security Tracker CVE-2016-15003 vendor-advisory