CVE-2012-4992

Опубликовано: 19 сент. 2012

Источник: nvd

CVSS2: 9

EPSS Средний

Описание

Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2012-03/0002.html
Exploit
http://osvdb.org/79767
http://seclists.org/fulldisclosure/2012/Mar/7
Exploit
http://www.exploit-db.com/exploits/18555
Exploit
http://www.flashfxp.com/forum/news/15473-flashfxp-4-2-released.html#post81101
http://www.securityfocus.com/bid/52259
http://www.vulnerability-lab.com/get_content.php?id=462
https://exchange.xforce.ibmcloud.com/vulnerabilities/73626
http://archives.neohapsis.com/archives/bugtraq/2012-03/0002.html
Exploit
http://osvdb.org/79767
http://seclists.org/fulldisclosure/2012/Mar/7
Exploit
http://www.exploit-db.com/exploits/18555
Exploit
http://www.flashfxp.com/forum/news/15473-flashfxp-4-2-released.html#post81101
http://www.securityfocus.com/bid/52259
http://www.vulnerability-lab.com/get_content.php?id=462
https://exchange.xforce.ibmcloud.com/vulnerabilities/73626

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:flashfxp:flashfxp:4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.17694

Средний

9 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-28p6-384f-vhg4

github

около 4 лет назад