CVE-2025-34107

Deeper analysis

A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality of WCMDPA10.dll. When the client connects to a remote FTP server and receives an overly long '220 Server Ready' response, the vulnerable component overflows a stack buffer, leading to arbitrary code execution in the context of the user running the client. The issue is tracked as CVE-2025-34107 with a CVSS score of 8.7 and is classified under CWE-121.

An attacker can exploit this by setting up a malicious FTP server that sends a crafted banner response upon connection. Any user who connects to this server using the vulnerable client can trigger the overflow, allowing the attacker to execute arbitrary code on the victim's system without requiring authentication or special privileges beyond the user's context.

Public exploits for this vulnerability are available, including a Metasploit module and entries on Exploit-DB, with an EPSS score of 0.7359 indicating significant exploitation likelihood. The provided references contain no details on patches or mitigation steps.