Description
FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting the EIP register through a custom command input. Attackers can craft a malicious payload of 4108 bytes to overwrite memory and execute shellcode, demonstrating remote code execution potential.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Internet-Soft | FTP Commander Pro | 8.02, 8.03 | — |
References
- ExploitDB-47775 exploit
- Software Vendor Homepage product
- Original DoS Exploit Entry exploit
- VulnCheck Advisory: FTP Commander Pro 8.03 - Local Stack Overflow third-party-advisory