CVE-2007-0825: Flashfxp

High severity, CVSS 7.8. EPSS: 3.3% chance of exploitation in the next 30 days.

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow.

Affected products

• Flashfxp Flashfxp: version 3.4.0_build_1145 only

Published 2007-02-07. Last modified 2026-06-16.