CVE-2015-2869

Affected software: Total Commander FileInfo plugin (version 2.21 affected, fixed in 2.22 per TALOS report). Vulnerability type: Out‑of‑bounds read leading to denial of service and possible application termination. Root cause: Attacker-controlled fields in COFF Archive and LE structures (Archive M...

CVE-2015-2869: Improper Restriction of Operations within the Bounds of a Memory Buffer

The FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a denial of service out-of-bounds read and application crash via 1 a large Size value in the Archive Member Header of a COFF Archive Library file, 2 a large Number Of Symbols value in the 1st Linker Membe...