PT-2015-5950 · Ghisler · Total Commander

Marcin Noga · Published 2015-07-21 · Updated 2017-09-21 · CVE-2015-2869

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ghisler Total Commander versions prior to 2.22 with the FileInfo plugin

Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash. This can be achieved through several methods, including:

• a large Size value in the Archive Member Header of a COFF Archive Library file,
• a large Number Of Symbols value in the 1st Linker Member of a COFF Archive Library file,
• a large Resource Table Count value in the LE Header of a Linear Executable file,
• a large value in a certain Object field in a Resource Table Entry in a Linear Executable file.

Recommendations For Ghisler Total Commander with the FileInfo plugin version prior to 2.22, update the FileInfo plugin to version 2.22 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-2869

Affected Products

Total Commander

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2015-2869 · Security Note
• http://totalcmd.net/plugring/fileinfo.html · Note
• http://blogs.cisco.com/security/talos/fileinfo-plugin-dos · Note
• http://securityfocus.com/bid/75955 · Note
• http://kb.cert.org/vuls/id/813631 · Note
• http://securitytracker.com/id/1033004 · Note