CVE-2007-4464

2007-08-2121:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.006

Percentile

78.4%

JSON

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGE_EXPORT_DIRECTORY array in a PE file, which could complicate forensics investigations.

References

blog.hispasec.com/lab/230

blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt

osvdb.org/46834

securityreason.com/securityalert/3044

www.securityfocus.com/archive/1/477170/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/36127