CVE catalog

CVE-2016-15003

filezilla: CVE-2016-15003

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
0.98% · Oct 25, 2026

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfilezillasid3.71.0-1not affected
Debianfilezillaforky3.71.0-1not affected
Debianfilezillatrixie3.68.1-1not affected
Debianfilezillabookworm3.63.0-1+deb12u3not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianfilezillasourcesidNot affectedunimportantNot reportedNot reported
DebianfilezillasourceforkyNot affectedunimportantNot reportedNot reported
DebianfilezillasourcetrixieNot affectedunimportantNot reportedNot reported
DebianfilezillasourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [filezilla]Not affected
    Details (2)
    • 3.63.0-1+deb12u3 · amd64 · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

    • 3.63.0-1+deb12u3 · arm64 · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

  • [filezilla-common]Not affected

    Source package: [filezilla]

    Details (2)
    • 3.63.0-1+deb12u3 · all · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

    • 3.63.0-1+deb12u3 · all · bookworm

      Not affected

      dsa · filezilla · debian · bookworm

Observed:

References