CVE-2008-1724: Tumbleweed Securetransport Server App

High severity, CVSS 9.3. EPSS: 35.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter.

Affected products

• Tumbleweed Securetransport Server App: up to and including 4.6.1

Published 2008-04-11. Last modified 2026-06-16.