4.6
CVSSv2

CVE-2003-1445

Published: 31/12/2003 Updated: 29/07/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in Far Manager 1.70beta1 and previous versions allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.

Vulnerable Product Search on Vulmon Subscribe to Product

rarlab far manager 1.65

rarlab far manager 1.70_beta_1

rarlab far manager 1.70_beta_4

Exploits

source: wwwsecurityfocuscom/bid/6822/info A buffer overflow vulnerability has been reported for FAR that may result in a denial of service condition The vulnerability exists due to insufficient bounds checking performed by FAR when parsing directory paths Specifically, when FAR attempts to parse overly long paths it will crash thereby r ...