CVE-2012-10055 ComSndFTP v1.3.7 Beta USER Format String RCE
Remote attackers can achieve arbitrary code execution on ComSndFTP FTP Server via a format string vulnerability in the USER command, bypassing DEP protections.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-10055?
CVE-2012-10055 is a critical memory corruption vulnerability in ComSndFTP FTP Server, published on 13 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ComSndFTP FTP Server version 1.3.7 Beta contains a format string vulnerability in its handling of the USER command. By sending a specially crafted username containing format specifiers, a remote attacker can overwrite a hardcoded function pointer in memory (specifically WSACleanup from Ws2_32.dll). This allows the attacker to redirect execution flow and bypass DEP protections using a ROP chain, ultimately leading to arbitrary code execution. The vulnerability is exploitable without authentication and affects default configurations.
Weakness: CWE-134
Which versions are affected by CVE-2012-10055?
How do I fix CVE-2012-10055?
No fix has been published for CVE-2012-10055 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2012-10055 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-10055 exists.
Public exploit code: 1 Metasploit module.
Sources
Also known as GHSA-54qp-xm8v-h899.