FKIE_CVE-2007-4464

Vulnerability from fkie_nvd - Published: 2007-08-21 21:17 - Updated: 2026-06-16 22:44
Severity
Summary
CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGE_EXPORT_DIRECTORY array in a PE file, which could complicate forensics investigations.
References
cve@mitre.orghttp://blog.hispasec.com/lab/230
cve@mitre.orghttp://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt
cve@mitre.orghttp://osvdb.org/46834
cve@mitre.orghttp://securityreason.com/securityalert/3044
cve@mitre.orghttp://www.securityfocus.com/archive/1/477170/100/0/threaded
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/36127
af854a3a-2127-422b-91ae-364da2661108http://blog.hispasec.com/lab/230
af854a3a-2127-422b-91ae-364da2661108http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/46834
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/3044
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/477170/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/36127
Impacted products
Vendor Product Version
fransois_gannier fileinfo_plugin 2.09
ghisler total_commander *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fransois_gannier:fileinfo_plugin:2.09:*:*:*:*:*:*:*",
              "matchCriteriaId": "A644825D-15B4-41BD-9DAD-0A3D823D6BC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ghisler:total_commander:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BBD0E31A-6EF9-4F76-8EDB-1548048764BA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGE_EXPORT_DIRECTORY array in a PE file, which could complicate forensics investigations."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de inyecci\u00f3n CRLF en el plugin Fileinfo versi\u00f3n 2.0.9 para Total Commander, permite a atacantes remotos asistidos por el usuario falsificar la informaci\u00f3n de la pesta\u00f1a del encabezado Image File por medio de cadenas con secuencias CRLF en la matriz IMAGE_EXPORT_DIRECTORY en un archivo PE, lo que podr\u00eda complicar las investigaciones forenses."
    }
  ],
  "id": "CVE-2007-4464",
  "lastModified": "2026-06-16T22:44:08.890",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-08-21T21:17:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://blog.hispasec.com/lab/230"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/46834"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/3044"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/477170/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36127"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://blog.hispasec.com/lab/230"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/46834"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/3044"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/477170/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36127"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.