CVE-2025-34096 | BDVDB-2026-285702 Detail
EFS SoftwareEasy File Sharing HTTP Server
Description#
A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long Email parameter. The application fails to properly validate the length of this field, resulting in a memory corruption condition. An unauthenticated remote attacker can exploit this to execute arbitrary code with the privileges of the server process.
Impact#
CAPEC-10 Buffer Overflow via Environment Variables
Weaknesses#
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References#
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.