Description
FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the FileOptimizer32.ini configuration file. Attackers can overwrite the TempDirectory parameter with a 5000-character buffer to cause the application to crash when opening options.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nikkhokkho | FileOptimizer | 14.00.2524 | — |
References
- ExploitDB-47586 exploit
- FileOptimizer Vendor Homepage product
- FileOptimizer Download Link product
- VulnCheck Advisory: FileOptimizer 14.00.2524 - Denial of Service third-party-advisory