CVE-2007-0825 describes a denial-of-service vulnerability in FlashFXP 3.4.0 build 1145, where a malicious remote server can trigger high CPU consumption by sending a specially crafted, long PWD command response with a deeply nested directory structure. This vulnerability has a CVSS score of 7.8 (High), indicating a critical impact with complete availability compromise, and can be exploited remotely without authentication. While not actively exploited in the wild and lacking Metasploit or Nuclei modules, a Proof-of-Concept exploit is available on ExploitDB, and it has garnered minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.4.0_build_1145CPE matchmatch criteria | cpe:2.3:a:flashfxp:flashfxp:3.4.0_build_1145:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.