3 matches found
CVE-2018-25366
CVE-2018-25366 affects CuteFTP 5.0 XP. A buffer overflow in the Site Manager label field allows a local attacker to execute arbitrary code by crafting a payload exceeding 520 bytes, which overwrites the return address and runs shellcode when a shortcut is created and launched. The connected docum...
CVE-2011-10012
NetOp Remote Control Client (now Impero) v9.5 contains a stack-based buffer overflow when parsing .dws configuration files. If a .dws string exceeds 520 bytes, bounds checking fails, potentially allowing arbitrary code execution when the file is opened. Public references confirm the vulnerable co...
CVE-2011-10012 NetOp Remote Control Client 9.5 .dws File Buffer Overflow
NetOp now part of Impero Software Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files. If a .dws file contains a string longer than 520 bytes, the application fails to perform proper bounds checking, allowing an attacker to execute...