CVE-2014-1861

The CVE-2014-1861 entry affects Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3. The issue is that the client does not validate the FileName element in an RDP_FILE_TRANSFER document, allowing a remote JCSB server to cause RCE by supplying a .EXE extension. This can enable arbitrary code exec...