PT-2006-6529 · Adobe · Download Manager

Published 2006-12-06 · Updated 2018-10-17 · CVE-2006-5856

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Download Manager versions prior to 2.2

Description The issue is related to a stack-based buffer overflow that can be triggered by a long section name in the dm.ini file. This file is populated via an AOM file, allowing remote attackers to potentially execute arbitrary code.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-5856

Affected Products

Download Manager

References · 14

• http://adobe.com/support/security/bulletins/apsb06-19.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-5856 · Security Note
• http://securityfocus.com/bid/21453 · Vendor Advisory
• http://research.eeye.com/html/advisories/published/AD20061205.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30742 · Note
• http://zerodayinitiative.com/advisories/ZDI-06-044 · Note
• http://securitytracker.com/id?1017340 · Note
• http://kb.cert.org/vuls/id/448569 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051114.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5856 · Note
• http://vupen.com/english/advisories/2006/4867 · Note
• http://secunia.com/advisories/23233 · Note
• http://securityfocus.com/archive/1/453755/100/0/threaded · Note
• http://securityfocus.com/archive/1/453636/100/0/threaded · Note