KLA11447 ACE vulnerability in WinSCP

Interpretation conflict vulnerability was found in WinSCP. Malicious users can exploit this vulnerability remotely to execute arbitrary code.

Original advisories

Related products

WinSCP

CVE list

CVE-2007-4909 critical

Solution

Update to the latest version

Download WinSCP

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• WinSCP earlier than 4.0.4