PT-2010-2721 · Free Download Manager Team · Free Download Manager

Published 2010-05-17 · Updated 2018-10-10 · CVE-2010-0998

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Free Download Manager versions prior to 3.0.852

Description The issue involves multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved through various vectors, including the folders feature in Site Explorer, the websites feature in Site Explorer, an FTP URI, or a redirect.

Recommendations For versions prior to 3.0.852, update to version 3.0.852 or later to resolve the issue. As a temporary workaround, consider restricting access to the Site Explorer features and avoiding the use of FTP URIs or redirects until the update is applied.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-0998

Affected Products

Free Download Manager

References · 11

• http://secunia.com/advisories/39447 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0998 · Security Note
• http://secunia.com/secunia_research/2010-68 · Vendor Advisory
• http://osvdb.org/64674 · Note
• http://osvdb.org/64672 · Note
• http://securityfocus.com/archive/1/511282/100/0/threaded · Note
• http://securityfocus.com/bid/40146 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7006 · Note
• http://osvdb.org/64671 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58626 · Note
• http://osvdb.org/64673 · Note