Index: t3lib/class.t3lib_div.php
===================================================================
--- t3lib/class.t3lib_div.php	(Revision 9758)
+++ t3lib/class.t3lib_div.php	(Arbeitskopie)
@@ -4499,6 +4499,7 @@
 	 */
 	public static function verifyFilenameAgainstDenyPattern($filename) {
 		if (strcmp($filename, '') && strcmp($GLOBALS['TYPO3_CONF_VARS']['BE']['fileDenyPattern'], '')) {
+			$filename = preg_replace('/[[:cntrl:]]/', '', $filename);
 			$result = preg_match('/' . $GLOBALS['TYPO3_CONF_VARS']['BE']['fileDenyPattern'] . '/i', $filename);
 			if ($result) {
 				return FALSE;