CVE-2010-20045: Cursorarts Filewrangler

High severity, CVSS 8.5. EPSS: 0.4% chance of exploitation in the next 30 days.

FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires passive user interaction—simply connecting to the server—without further input. Successful exploitation may lead to arbitrary code execution.

Affected products

• Cursorarts Filewrangler: up to and including 5.30

Published 2025-08-20. Last modified 2026-06-16.