Lucene search

K
cvelistKrcertCVELIST:CVE-2019-17320
HistoryOct 10, 2019 - 2:45 p.m.

CVE-2019-17320

2019-10-1014:45:24
CWE-119
krcert
www.cve.org

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.3%

NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename.

CNA Affected

[
  {
    "product": "XFTP",
    "vendor": "NetSarang",
    "versions": [
      {
        "status": "affected",
        "version": "6.0149 and earlier"
      }
    ]
  }
]

9.8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.3%

Related for CVELIST:CVE-2019-17320