Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhandled exception) via an invalid RVA address function pointer in (1) an IMAGE_THUNK_DATA structure, involving the (a) OriginalFirstThunk and (b) FirstThunk IMAGE_IMPORT_DESCRIPTOR fields, or (2) the AddressOfNames IMAGE_EXPORT_DIRECTORY field in a PE file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Total Commander FileInfo插件PE文件处理多个拒绝服务漏洞
Vulnerability Description
FileInfo是Total Commander中使用的一个插件，允许用户浏览MZ、PE和COFF文件的结构。 FileInfo在处理畸形结构的文件时存在漏洞，远程攻击者可能利用此漏洞导致崩溃。 在PE文件中，IMAGE_IMPORT_DESCRIPTOR包含有OriginalFirstThunk、FirstThunk和AddressOfNames字段，这些字段都指向IMAGE_THUNK_DATA结构的数组，该结构可能包含有导入函数名称的RVA地址。如果该函数名称的指针无效，Fileinfo就会出现访问
CVSS Information
N/A
Vulnerability Type
N/A