Vulnerability Details CVE-2014-0603
The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSiteProperties3 methods, which triggers a dereference of an arbitrary memory address. NOTE: this issue was MERGED with CVE-2014-0606 because it is the same type of vulnerability, affecting the same set of versions, and discovered by the same researcher.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.114
EPSS Ranking 93.2%
CVSS Severity
CVSS v2 Score 10.0
References
- http://support.attachmate.com/techdocs/2501.html
- http://www.zerodayinitiative.com/advisories/ZDI-14-288/
- http://www.zerodayinitiative.com/advisories/ZDI-14-291/
- http://support.attachmate.com/techdocs/2501.html
- http://www.zerodayinitiative.com/advisories/ZDI-14-288/
- http://www.zerodayinitiative.com/advisories/ZDI-14-291/
Products affected by CVE-2014-0603
-
cpe:2.3:a:attachmate:reflection_ftp_client:*