CVE-2015-2869

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.66%

Published

Jul 21, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via (1) a large Size value in the Archive Member Header of a COFF Archive Library file, (2) a large Number Of Symbols value in the 1st Linker Member of a COFF Archive Library file, (3) a large Resource Table Count value in the LE Header of a Linear Executable file, or (4) a large value in a certain Object field in a Resource Table Entry in a Linear Executable file.

Weaknesses (CWE)

CWE-119

Affected Products (1)

ghisler · total_commandervulnerable

References (10)

http://blogs.cisco.com/security/talos/fileinfo-plugin-dos

http://totalcmd.net/plugring/fileinfo.html

http://www.kb.cert.org/vuls/id/813631

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/75955

http://www.securitytracker.com/id/1033004

http://blogs.cisco.com/security/talos/fileinfo-plugin-dos

http://totalcmd.net/plugring/fileinfo.html

http://www.kb.cert.org/vuls/id/813631

KEV Catalog EPSS Scores Vendors All CVEs