PT-2007-5643 · Total Commander · Fileinfo Plugin

Published 2007-08-21 · Updated 2018-10-15 · CVE-2007-4463

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Fileinfo plugin for Total Commander version 2.0.9

Description The issue allows user-assisted remote attackers to cause a denial of service via an invalid RVA address function pointer in a PE file, specifically involving the OriginalFirstThunk and FirstThunk fields in an IMAGE IMPORT DESCRIPTOR, or the AddressOfNames field in an IMAGE EXPORT DIRECTORY.

Recommendations For Fileinfo plugin for Total Commander version 2.0.9, update to a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2007-4463

Affected Products

Fileinfo Plugin

References · 9

• 🔥 https://exploit-db.com/exploits/30512 · Exploit
• 🔥 http://securityfocus.com/bid/25373 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4463 · Security Note
• http://securityreason.com/securityalert/3044 · Note
• http://securityfocus.com/archive/1/477170/100/0/threaded · Note
• http://blog.hispasec.com/lab/230 · Note
• http://osvdb.org/46835 · Note
• http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36126 · Note