Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3hrq-94cp-44pf

Опубликовано: 26 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 8.4

Описание

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortcut is created and launched.

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortcut is created and launched.

EPSS

Процентиль: 8%
0.00183
Низкий

8.6 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 8.4
nvd
3 месяца назад

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortcut is created and launched.

EPSS

Процентиль: 8%
0.00183
Низкий

8.6 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-120