PT-2010-2721 · Free Download Manager Team · Free Download Manager

Publicado 2010-05-17 · Atualizado 2018-10-10 · CVE-2010-0998

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Free Download Manager versions prior to 3.0.852

Description The issue involves multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved through various vectors, including the folders feature in Site Explorer, the websites feature in Site Explorer, an FTP URI, or a redirect.

Recommendations For versions prior to 3.0.852, update to version 3.0.852 or later to resolve the issue. As a temporary workaround, consider restricting access to the Site Explorer features and avoiding the use of FTP URIs or redirects until the update is applied.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-0998

Produtos afetados

Free Download Manager

Referências · 11

• http://osvdb.org/64674 · Nota
• http://osvdb.org/64672 · Nota
• http://secunia.com/advisories/39447 · Aviso do Fabricante
• http://securityfocus.com/archive/1/511282/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0998 · Nota de Segurança
• http://securityfocus.com/bid/40146 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7006 · Nota
• http://osvdb.org/64671 · Nota
• http://secunia.com/secunia_research/2010-68 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58626 · Nota
• http://osvdb.org/64673 · Nota