FlashFXP Multiple Buffer Overflow Vulnerabilities

FlashFXP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:flashfxp:flashfxp"...

CVE-2012-4992

FlashFXP is affected by CVE-2012-4992 due to multiple buffer overflows in FlashFXP.exe (TListbox/TComboBox handling). The issue arises in FlashFXP 4.2 and earlier, allowing remote attackers to execute arbitrary code by sending a long unicode string to the TListbox or TComboBox. Public exploitatio...

KLA10162 ACE vulnerability in FlashFXP

Buffer overflows were found in FlashFXP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed strings in listbox or combobox. Original advisories FlashFXP bulletin Exploitation Public exploits exist for th...