CVE-2020-5183 - FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application

Back Back to CVE browser

HIGH

FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application

Published Jan 8, 2020

7.5

HIGH

CVSS 3.1

EPSS 2.01%

Description

FTPGetter Professional 5.97.0.223 is vulnerable to a memory corruption bug when a user sends a specially crafted string to the application. This memory corruption bug can possibly be classified as a NULL pointer dereference.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-476

NULL Pointer Dereference

CWE-787

Out-of-bounds Write

References (3)

http://packetstormsecurity.com/files/155832/FTPGetter-Professional-5.97.0.223-Denial-Of-Service.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26430
Advisory
https://www.exploit-db.com/exploits/47871
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://packetstormsecurity.com/files/155832/FTPGetter-Professional-5.97.0.223-Denial-Of-Service.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26430		Advisory
https://www.exploit-db.com/exploits/47871		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry