Vulnerability record · CVE-2007-0825 · published 7 February 2007

CVE-2007-0825: Flashfxp vulnerability

Flashfxp · Flashfxp

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow.

7.8 CVSS 2.0 High EPSS 3.3% · top 12.1%

7.8CVSS 2.0 base score

3.3%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Flashfxp Flashfxp

References

Link	Tags
http://osvdb.org/35796
http://www.securityfocus.com/bid/22433
https://exchange.xforce.ibmcloud.com/vulnerabilities/32416
https://www.exploit-db.com/exploits/3276
http://osvdb.org/35796
http://www.securityfocus.com/bid/22433
https://exchange.xforce.ibmcloud.com/vulnerabilities/32416
https://www.exploit-db.com/exploits/3276

Track CVE-2007-0825 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2012-4992Flashfxp memory buffer overflow vulnerabilityMultiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1)…EPSS 18%19 Sep 2012 6.4CVE-2003-1483Flashfxp vulnerabilityFlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.EPSS 0.69%31 Dec 2003 2.1CVE-2002-1939Flashfxp vulnerabilityFlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users b…EPSS 0.35%31 Dec 2002

Source: NIST National Vulnerability Database (record CVE-2007-0825), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.