PT-2007-1664 · Ef · Ef Commander

Published 2007-01-11 · Updated 2017-07-29 · CVE-2007-0180

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EF Commander version 5.75

Description The issue is a stack-based buffer overflow that allows attackers to execute arbitrary code. This is achieved through a crafted ISO file containing a file within several nested directories, resulting in a large filename that triggers the overflow.

Recommendations For EF Commander version 5.75, update to a newer version that contains a fix for this issue. As a temporary workaround, consider avoiding the use of crafted ISO files that could trigger the buffer overflow.

Exploit

Fix

Related Identifiers

CVE-2007-0180

Affected Products

Ef Commander

References · 6

• 🔥 http://vuln.sg/efcommander575-en.html · Exploit
• http://secunia.com/advisories/23659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0180 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31365 · Note
• http://osvdb.org/32660 · Note
• http://securityfocus.com/bid/21969 · Note