CVE-2007-2318

N/A Unknown
Published: April 26, 2007 Modified: April 23, 2026
View on NVD

Description

Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FTP server. NOTE: some of these details are obtained from third party information.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/34436
Source: cve@mitre.org
http://osvdb.org/34437
Source: cve@mitre.org
http://secunia.com/advisories/24894
Source: cve@mitre.org
Patch Vendor Advisory
http://www.securityfocus.com/bid/23506
Source: cve@mitre.org
Patch
http://osvdb.org/34436
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/34437
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/24894
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://www.securityfocus.com/bid/23506
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

10 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.4%
85th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

filezilla