Description
FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires passive user interaction—simply connecting to the server—without further input. Successful exploitation may lead to arbitrary code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CursorArts FileWrangler
Default version status: unknown
0 to ≤ 5.30affected
References
- https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ ↗
- https://cursorarts.com/ca_fw.html ↗
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/filewrangler_list_reply.rb ↗
- https://www.exploit-db.com/exploits/16721 ↗
- https://www.vulncheck.com/advisories/filewrangler-stack-buffer-overflow ↗