medium5.0Public exploit code
CVE-2007-4463
The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhandled exception) via an invalid RVA addre…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities2007-07-20 · dos · windows · Verified
Impact
The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhandled exception) via an invalid RVA address function pointer in (1) an IMAGE_THUNK_DATA structure, involving the (a) OriginalFirstThunk and (b) FirstThunk IMAGE_IMPORT_DESCRIPTOR fields, or (2) the AddressOfNames IMAGE_EXPORT_DIRECTORY field in a PE file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fransois Gannier | Fileinfo Plugin | Version 2.09 |
| Ghisler | Total Commander | All versions |
References
- NVD record
- CVE.org record
- http://blog.hispasec.com/lab/230
- http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt
- http://osvdb.org/46835
- http://securityreason.com/securityalert/3044
- http://www.securityfocus.com/archive/1/477170/100/0/threaded
- http://www.securityfocus.com/bid/25373
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36126
- http://blog.hispasec.com/lab/230
- http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt
- http://osvdb.org/46835
- http://securityreason.com/securityalert/3044
- http://www.securityfocus.com/archive/1/477170/100/0/threaded
- http://www.securityfocus.com/bid/25373
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36126