CVE-2010-20045 HIGH

CVE-2010-20045: FileWrangler <= 5.30 Stack Buffer Overflow

Vendor Cursorarts
Product FileWrangler
Weakness CWE-121
Published August 20, 2025
Last update May 15, 2026

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires passive user interaction—simply connecting to the server—without further input. Successful exploitation may lead to arbitrary code execution.

Key dates

02Disclosure timeline

August 20, 2025 CVE published
May 15, 2026 Record updated