NuytsTech Security

CVE-2008-1724

by ·

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter.

Date published : 2008-04-11

http://www.securityfocus.com/bid/28662

http://www.securityfocus.com/archive/1/490536/100/0/threaded

Tags: