{"uuid": "fb5fe392-4d95-429f-90fc-35dedcd968b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-1724", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/tumbleweed_filetransfer.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"aushack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in the vcst_eu.dll\\n          FileTransfer Module (1.0.0.5) ActiveX control in the Tumbleweed\\n          SecureTransport suite. By sending an overly long string to the\\n          TransferFile() 'remotefile' function, an attacker may be able\\n          to execute arbitrary code.\", \"disclosure_date\": \"2008-04-07\", \"fullname\": \"exploit/windows/browser/tumbleweed_filetransfer\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Tumbleweed FileTransfer vcst_eu.dll ActiveX Control Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/tumbleweed_filetransfer.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/browser/tumbleweed_filetransfer\", \"references\": [\"CVE-2008-1724\", \"OSVDB-44252\", \"URL-http://www.aushack.com/200708-tumbleweed.txt\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal vcst_eu.dll\", \"Windows 2000 Pro English\", \"Windows XP Pro SP0/SP1 English\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:15.734955Z"}