Internet Download Manager File Parsing Buffer Overflow Vulnerability
BID:31603
Info
Internet Download Manager File Parsing Buffer Overflow Vulnerability
| Bugtraq ID: | 31603 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-4508 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 06 2008 12:00AM |
| Updated: | May 07 2015 05:22PM |
| Credit: | Ciph3r |
| Vulnerable: |
Internet Download Manager Corp. Internet Download Manager 4.0 5 Internet Download Manager Corp. Internet Download Manager 4.0 4 Internet Download Manager Corp. Internet Download Manager 4.0 3 Internet Download Manager Corp. Internet Download Manager 4.0 2 Internet Download Manager Corp. Internet Download Manager 4.0 1 Internet Download Manager Corp. Internet Download Manager 5.14 Internet Download Manager Corp. Internet Download Manager 4.00 Internet Download Manager Corp. Internet Download Manager 3.x Internet Download Manager Corp. Internet Download Manager 2.x |
| Not Vulnerable: | |
Discussion
Internet Download Manager File Parsing Buffer Overflow Vulnerability
Internet Download Manager (IDM) is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
NOTE: This vulnerability may be related to the issue described in BID 14159 (Internet Download Manager Buffer Overflow Vulnerability), but this has not been confirmed.
We don't know which versions of IDM are affected. We will update this BID when more information emerges.
Internet Download Manager (IDM) is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
NOTE: This vulnerability may be related to the issue described in BID 14159 (Internet Download Manager Buffer Overflow Vulnerability), but this has not been confirmed.
We don't know which versions of IDM are affected. We will update this BID when more information emerges.
Exploit / POC
Internet Download Manager File Parsing Buffer Overflow Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Internet Download Manager File Parsing Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Internet Download Manager File Parsing Buffer Overflow Vulnerability
References:
References:
- Internet Download Manager Homepage (Internet Download Manager Corp.)