bugtraq
[Top] [All Lists]

[vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerab

To: bugtraq@securityfocus.com
Subject: [vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability
From: vulnpost-remove@vuln.sg
Date: 30 Dec 2006 03:00:49 -0000
Delivered-to: sp-com-lists@consult.net
Delivered-to: bugtraq-list@securepoint.com
Delivered-to: mailing list bugtraq@securityfocus.com
Delivered-to: moderator for bugtraq@securityfocus.com
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@securityfocus.com; run by ezmlm
[vuln.sg] Vulnerability Research Advisory

iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability

by Tan Chew Keong
Release Date: 2006-12-30

Summary
-------
A vulnerability has been found in iso_wincmd Total Commander Plugin. When 
exploited, the vulnerability allows execution of arbitrary code when the user 
opens a malicious ISO file.

Tested Versions
---------------
iso_wincmd version 1.7.3.3 (1.7.3 Beta 3) and version 1.6.10.

Details
-------
http://vuln.sg/isowincmd173-en.html
http://vuln.sg/isowincmd173-jp.html

<Prev in Thread] Current Thread [Next in Thread>
  • [vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability, vulnpost-remove <=