peter bassill · operator
$ cve CVE-2007-3548 JSON

CVE-2007-3548 EXPLOIT

7.1
HIGH · CVSS 2.0 · EPSS 3.9% (pctl 90)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang or crash) and possibly execute arbitrary code by sending a large banner to a client that is sending a file.

Scoring

CVSS7.1 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:N/I:N/A:C
EPSS3.89% — more likely to be exploited than 90% of all CVEs
On CISA KEVno
Public exploityes
Published2007-07-03
Last modified2026-06-16

Affected (1)

VendorProduct
w3filerw3filer

Public exploits

SourceTitleDate
exploit-dbW3Filer 2.1.3 - Remote Stack Overflow (PoC)2007-06-29

References

→ the Explorer  ·  watch your stack  ·  NVD