PT-2007-5643 · Total Commander · Fileinfo Plugin

Publicado 2007-08-21 · Atualizado 2018-10-15 · CVE-2007-4463

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Fileinfo plugin for Total Commander version 2.0.9

Description The issue allows user-assisted remote attackers to cause a denial of service via an invalid RVA address function pointer in a PE file, specifically involving the OriginalFirstThunk and FirstThunk fields in an IMAGE IMPORT DESCRIPTOR, or the AddressOfNames field in an IMAGE EXPORT DIRECTORY.

Recommendations For Fileinfo plugin for Total Commander version 2.0.9, update to a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-4463

Produtos afetados

Fileinfo Plugin

Referências · 9

• 🔥 https://exploit-db.com/exploits/30512 · Exploit
• 🔥 http://securityfocus.com/bid/25373 · Exploit
• http://securityreason.com/securityalert/3044 · Nota
• http://securityfocus.com/archive/1/477170/100/0/threaded · Nota
• http://blog.hispasec.com/lab/230 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4463 · Nota de Segurança
• http://osvdb.org/46835 · Nota
• http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36126 · Nota