CVE-2015-2869

Affected software: Total Commander FileInfo plugin (version 2.21 affected, fixed in 2.22 per TALOS report). Vulnerability type: Out‑of‑bounds read leading to denial of service and possible application termination. Root cause: Attacker-controlled fields in COFF Archive and LE structures (Archive M...

PT-2015-5950

Name of the Vulnerable Software and Affected Versions Ghisler Total Commander versions prior to 2.22 with the FileInfo plugin Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash. This can be achieved through several...

CVE-2015-2869: Improper Restriction of Operations within the Bounds of a Memory Buffer

The FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a denial of service out-of-bounds read and application crash via 1 a large Size value in the Archive Member Header of a COFF Archive Library file, 2 a large Number Of Symbols value in the 1st Linker Membe...