CVE-2009-4775: Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause...

Security readout for executives and security teams

This is an old WS_FTP Professional client flaw. A malicious or compromised server could send a malformed HTTP response that crashes vulnerable WS_FTP Professional 12 clients before version 12.2. The sourced impact is denial of service, not confirmed data theft or system takeover. Exposure is likely limited to endpoints still running WS_FTP Professional 12 versions earlier than 12.2 and interacting with untrusted or attacker-controlled HTTP responses. Organizations without this legacy client version are not exposed based on the provided sources. Treat this as a legacy software hygiene issue with public exploit information. It is not currently sourced as actively exploited, but vulnerable clients can be crashed remotely and should be upgraded or removed during endpoint cleanup. Mitigation focus: Upgrade WS_FTP Professional 12 installations to version 12.2 or later.; Remove unsupported or unused WS_FTP Professional installations from endpoints.; Avoid using vulnerable clients with untrusted servers until remediated..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.