PT-2026-41434 · Internetdownloadmanager · Internet Download Manager

Vincent Wolterman · Published 2026-05-16 · Updated 2026-05-16 · CVE-2020-37234

Mitre

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to trigger a denial of service condition.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-37234

Affected Products

Internet Download Manager

References · 5

• 🔥 https://exploit-db.com/exploits/49083 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37234 · Security Note
• https://vulncheck.com/advisories/internet-download-manager-scheduler-buffer-overflow · Note
• http://internetdownloadmanager.com · Note
• http://internetdownloadmanager.com/download.html · Note