Multiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree functions in the ISO (iso_wincmd) plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iso_wincmd | Sergey_oblomov | 1.6.10 (including) | 1.6.10 (including) |
| Iso_wincmd | Sergey_oblomov | 1.7.3.3 (including) | 1.7.3.3 (including) |