CVE-2007-4464

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...

Crlf injection

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...

CVE-2007-4463

The CVE-2007-4463 entry concerns the Fileinfo 2.0.9 plugin for Total Commander. Affected component: PE file handling within the plugin, specifically invalid RVA address function pointers in IMAGE_THUNK_DATA (OriginalFirstThunk/FirstThunk) and IMAGE_EXPORT_DIRECTORY’s AddressOfNames. Root cause: m...

CVE-2007-4464

The CVE-2007-4464 entry describes a CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander. The issue affects the plugin’s handling of PE exports: an attacker could inject CRLF sequences into the IMAGE_EXPORT_DIRECTORY data, enabling spoofing of information shown in the Ima...

CVE-2007-4463

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

CVE-2007-4464

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...

Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities

Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/25373/info The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malform...

Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/25373/info The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malformed input. Successfully exploiting these issues allows remote attackers to crash the affect...

Total Commander任意文件删除漏洞

Total Commander是一款磁盘文件管理软件。 Total Commander存在输入验证错误，本地攻击者可以利用漏洞删除任意系统文件。 问题是Total Commander处理恶意构建的RAR文件存在问题，由于输入验证问题，可导致删除或者破坏系统文件，造成拒绝服务攻击。 Total Commander Total Commander 升级程序： Total Commander Total Commander 0 Total Commander Total Commander 6.56 http://www.ghisler.com/download.htm...

Information disclosure

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Total Commander up to version 6.5.5 is affected by an unspecified vulnerability that allows user-assisted remote attackers to delete arbitrary files and corrupt the filesystem via a crafted RAR file. The issue is described in multiple sources as affecting Total Commander before 6.5.6; CVSS-derive...

CVE-2006-6837

Technical details about CVE-2006-6837 are not publicly provided in the supplied documents; monitor for updates.

CVE-2006-6837

Multiple stack-based buffer overflows in the 1 LoadTree, 2 ReadHeader, and 3 LoadXBOXTree functions in the ISO isowincmd plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image...

CVE-2006-6837

Multiple stack-based buffer overflows in the 1 LoadTree, 2 ReadHeader, and 3 LoadXBOXTree functions in the ISO isowincmd plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image...

Total Commander iso_wincmd plugin buffer overflow

Buffer overflow on ISO files parsing...

Total Commands ISO_WinCmd插件多个远程栈溢出漏洞

Total Commander（原Windows Commander）是一款磁盘文件管理软件，可以取代资源管理器。 Total Commander的isowincmd插件在创建ISO镜像中文件的完整路径名时存在栈溢出漏洞。 溢出发生在LoadTree和ReadHeader函数中，这两个函数通过读取ISO文件中的目录项创建ISO镜像中每个文件的完整路径名。从每个目录项读取的目录名通过lstrcatA连接到一起，最后连接到文件名，然后使用不安全的lstrcpyA函数将创建的完整路径名拷贝到固定长度的栈缓冲区。...

[vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability

vuln.sg Vulnerability Research Advisory isowincmd Plugin for Total Commander Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-12-30 Summary ------- A vulnerability has been found in isowincmd Total Commander Plugin. When exploited, the vulnerability allows execution of arbitrary...

Total Commander 6.x - 'unacev2.dll' Buffer Overflow (PoC)

/ -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include include unsigned char evilace =...