CVEvulnerability
CVE-2007-0315
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-01-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.cpp when storing settings in the registry, and (2) the transfer queue (QueueCtrl.cpp). NOTE: some of these details are obtained from third party information.
Affected configurations
• filezilla filezilla (<= 2.2.30)
• filezilla filezilla 0.9.20
• filezilla filezilla 0.9.21
• filezilla filezilla 0.9.22
• filezilla filezilla 2.2.15
• filezilla filezilla 2.2.22
• filezilla filezilla 2.2.23
• filezilla filezilla 2.2.24
• filezilla filezilla 2.2.25
• filezilla filezilla 2.2.26
• filezilla filezilla 2.2.26a
• filezilla filezilla 2.2.27
• filezilla filezilla 2.2.28
• filezilla filezilla 2.2.29
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://sourceforge.net/project/shownotes.php?release_id=475423&group_id=21558 Patch
- http://www.securityfocus.com/bid/22057 Patch
- http://www.vupen.com/english/advisories/2007/0183 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31500 exchange.xforce.ibmcloud.com
- http://sourceforge.net/project/shownotes.php?release_id=475423&group_id=21558 Patch
- http://www.securityfocus.com/bid/22057 Patch
- http://www.vupen.com/english/advisories/2007/0183 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31500 exchange.xforce.ibmcloud.com