CVE-2012-10055: Use of Externally-Controlled Format String

ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory specifically WSACleanup from Ws232.dll...

ComSndFTP FTP Server format string vulnerability

Format string vulnerability in USER command...