EF Commander ISO File Remote Buffer Overflow Vulnerability

Bugtraq ID:	21969
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 09 2007 12:00AM
Updated:	Jan 10 2007 06:10PM
Credit:	Tan Chew Keong is credited with the discovery of this vulnerability.
Vulnerable:	EFSoftware EF Commander 5.75
Not Vulnerable:	EFSoftware EF Commander 5.80

EF Commander ISO File Remote Buffer Overflow Vulnerability

EF Commander is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data prior to using it in a finite-sized buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the user running the affected application.

This issue affects version 5.75; other versions may also be vulnerable.

EF Commander ISO File Remote Buffer Overflow Vulnerability

Solution:
The vendor has released version 5.80 to address this issue.


EFSoftware EF Commander 5.75

• EFSoftware efcw580.exe
  ftp://ftp.us.es

EF Commander ISO File Remote Buffer Overflow Vulnerability

References:

• EF Commander (EFSoftware)
  
• EF Commander ISO File Long Pathname Buffer Overflow Vulnerability (Tan Chew Keong)