Xlightftpd · Xlight · CVE-2019-25681
**Name of the Vulnerable Software and Affected Versions**
Xlight FTP Server version 3.9.1
**Description**
A structured exception handler (SEH) overwrite issue exists, where SEH is a mechanism used by Windows to handle hardware and software exceptions. Local attackers can crash the application and overwrite SEH pointers by providing a crafted buffer string. By injecting a 428-byte payload through the program execution field in the virtual server configuration, a buffer overflow is triggered that corrupts the SEH chain, potentially allowing arbitrary code execution.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.