Buffer Over Flow

pankajwashere
Joined:: 2022-05-27
Posts:: 1
Location:: nepal

Buffer Over Flow

2022-05-27 07:47

Hello team,

Found and Buffer over flow issue due to MSFTEDIT.DLL module

Steps to generate .
Upload any notepad file 247977 + kb file to ssh server
now try to edit from winscp editor
Buffer Over Executed

(5614.4c88): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000000 ebx=0266ac68 ecx=000000cd edx=000000cc esi=0266ac68 edi=0076eee4
eip=5b858395 esp=0076f0e4 ebp=0076f0f4 iopl=0         nv up ei pl nz na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206
MSFTEDIT!CCallMgr::CCallMgr+0x90:

bufferoverflow.png (21.81 KB)

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,518
Location:: Prague, Czechia

Re: Buffer Over Flow

2022-05-30

WinSCP internal editor is indeed not capable of editing 200 MB files.
You should have actually got a warning when trying to edit such large file. Did you? If not, you might have suppressed the warning in the past.

Reply with quote

You can post new topics in this forum

Buffer Over Flow

Buffer Over Flow

Re: Buffer Over Flow

Documentation

Support

Associations

Follow Us