The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executable macro symbols.
| Software | From | Fixed in |
|---|---|---|
| rejetto / http_file_server | - | 2.3c.x |