Buffer Overflow Vulnerability in WinaXe FTP Client by Developer Network
CVE-2025-34107
Key Information:
- Vendor
Labf
- Status
- Vendor
- CVE Published:
- 15 July 2025
Badges
What is CVE-2025-34107?
A buffer overflow vulnerability in the WinaXe FTP Client version 7.7 occurs when the software processes an excessively long '220 Server Ready' response during FTP banner parsing. This flaw, found in the WCMDPA10.dll component, enables an attacker to execute arbitrary code, potentially compromising the user's system. This vulnerability highlights the importance of securing FTP communications and implementing strict input validation to prevent overflow exploits.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
WinaXe FTP Client Windows 7.7
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
EPSS Score
52% chance of being exploited in the next 30 days.
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved