Ilya Teterin

**Name of the Vulnerable Software and Affected Versions** Midnight Commander versions prior to 4.6.0 **Description** The issue is related to a stack-based buffer overflow in the `vfs s resolve symlink` function of `vfs/direntry.c`, which can be exploited by remote attackers to execute arbitrary code during symlink conversion. **Recommendations** For versions prior to 4.6.0, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.