CVE-2010-20107: Liuxz Software FTP Synchronizer Professional

High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP server and issues a LIST command—typically during sync preview or profile creation—the server’s response containing an overly long filename triggers a buffer overflow. This results in the corruption of the Structured Exception Handler (SEH), potentially allowing remote code execution.

Affected products

• Liuxz Software FTP Synchronizer Professional: up to and including 4.0.73.274

Published 2025-08-21. Last modified 2026-06-16.