CVE-2019-17320

Publication date

2019-10-10 14:45:24

Family

krcert

State

PUBLISHED

Description

NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename.