Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Options
Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

Options

Topic review

martin

Re: Buffer overflow in WinSCP.

Does the problem occur with the latest version? Also do you use SFTP or SCP? I'm not able to test it myself as I do not have a system available, where such a long filename can be created.
vikas.adhangale

Buffer overflow in WinSCP.

Hi all,

I'm a security professional, working in a reputed security firm. There is a possible overflow in WinSCP-3.8.0. WinSCP is not able to handle long filenames. This is true in case of long filenames of 255 characters long with normal alphanumeric characters and with specially crafted filenames as well. Once you try to copy files with long filenames, a buffer overrun occurs and windows terminates WinSCP instances. :D

Best Regards,
Vikas Adhangale.
MOB: +91 9822052560
YIM: vikas_adhangale
Gtalk: vikas.adhangale