CVE-2004-1118 describes a critical buffer overflow vulnerability in the WodFtpDLX.ocx ActiveX component, affecting versions prior to 2.3.2.97. This flaw is present in applications like CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, allowing remote attackers to execute arbitrary code by supplying an overly long filename. This vulnerability carries a maximum CVSS score of 10.0, indicating severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 97/100, highlighting its significant danger. While not listed on the CISA KEV catalog, exploit code is publicly available on ExploitDB, demonstrating its practical exploitability. The CVE has garnered substantial community discussion with 10 mentions, indicating a high level of awareness among security researchers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:weonlydo:wodftpdlx_activex_component:*:*:*:*:*:*:*:* | ||
2.1.1_8CPE matchmatch criteria | cpe:2.3:a:weonlydo:wodftpdlx_activex_component:2.1.1_8:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.