← Database

CVE-2008-1724

CRITICAL CVSS: 9.3 Published: 2008-04-11 Modified: 2026-06-16

Description

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter.

Affected Platforms

Tumbleweed Securetransport ServerTumbleweed Securetransport Server App

Weakness Type

CWE-119

References