CVE-2008-4652

Published: Oct 22, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property.

Affected (1)

Products: Dart: Powertcp Ftp For Activex

Dart

1 product

Powertcp Ftp For Activex

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dart Powertcp Ftp For Activex	Version 2.0.2.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

http://securityreason.com/securityalert/4458

Source: cve@mitre.org

http://www.securityfocus.com/bid/31814

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45975

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6793

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6840

Source: cve@mitre.org

http://securityreason.com/securityalert/4458