Dr_IDE has discovered a vulnerability in CuteFTP, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an error when connecting to sites having an overly long label. This can be exploited to corrupt heap memory by tricking a user into importing a malicious site list and connecting to a site having an overly long label.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in CuteFTP Home and CuteFTP Professional version 8.3.3.0054. Other versions may also be affected.

Solution
Do not import untrusted site lists or connect to untrusted FTP sites.

Provided and/or discovered by
Dr_IDE

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers