Aggregates CVE and security vulnerability intelligence across all flashfxp-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk buffer overflow and vendor risk denial of service and related problems; some flaws may lead to vendor impact application crash and vendor impact memory corruption.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2012-4992 | Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox. | [email protected] | 9.0 | 44.60% | 2012-09-19 | 2026-04-29 |
| CVE-2007-0825 | FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow. | [email protected] | 7.8 | 5.50% | 2007-02-07 | 2026-04-23 |
| CVE-2003-1483 | FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access. | [email protected] | 6.4 | 0.17% | 2003-12-31 | 2026-04-16 |
| CVE-2002-1939 | FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties. | [email protected] | 2.1 | 0.05% | 2002-12-31 | 2026-04-16 |