CVE-2004-1118

Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10…

published December 1, 2004

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

⚠️ A single overly long filename is all it takes to exploit this buffer overflow in WodFtpDLX.ocx! This pesky vulnerability could let attackers execute arbitrary code on your systems. 🔥 Think of it like an overly stuffed suitcase at the airport — you pack it so tight that it can burst open, spilling everything out. In this case, the suitcase is the ActiveX component, and that long filename is pushing it beyond its limits! If exploited, an attacker could take control of your system and run any code they choose, giving them access to sensitive data or even the ability to install malware. This could lead to a security breach that compromises not just individual machines, but potentially the entire network — absolutely devastating!

Put simply

Think of it like an overly stuffed suitcase at the airport — you pack it so tight that it can burst open, spilling everything out. In this case, the suitcase is the ActiveX component, and that long filename is pushing it beyond its limits! This buffer overflow vulnerability in WodFtpDLX.ocx occurs when the component fails to properly validate the length of filenames, allowing attackers to send a crafted long filename that can overflow the buffer and execute arbitrary code.

What to do

If exploited, an attacker could take control of your system and run any code they choose, giving them access to sensitive data or even the ability to install malware. This could lead to a security breach that compromises not just individual machines, but potentially the entire network — absolutely devastating! To protect your systems, upgrade WodFtpDLX.ocx to version 2.3.2.97 or later as soon as possible. Additionally, ensure that any applications using this component, like CoffeeCup Direct FTP and Free FTP, are updated to their latest versions. Regularly review your software for vulnerabilities to stay ahead! You’ve got this! With these steps, you can keep your systems safe and secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08184 · 94.8th percentile
Published
2004-12-01T05:00Z
EPSS history
Timeline
  • 01 DEC 05:00Z
    Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10…
    cvelistv5