Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities
BID:33555
Info
Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 33555 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-0184 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 02 2009 12:00AM |
| Updated: | Nov 12 2009 07:36PM |
| Credit: | Carsten Eiram, Secunia Research |
| Vulnerable: |
Freedownloadmanager Free Download Manager 3.0.Build 844 Freedownloadmanager Free Download Manager 2.5 Build 758 |
| Not Vulnerable: |
Freedownloadmanager Free Download Manager 3.0.Build 848 |
Discussion
Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities
Free Download Manager is prone to multiple remote buffer-overflow vulnerabilities because the software fails to perform adequate boundary checks on user-supplied input.
Attackers may leverage these issues to execute arbitrary code in the context of the application. Successful exploits may compromise the application and the underlying computer. Failed attacks will cause denial-of-service conditions.
The issues affects the following versions:
Free Download Manager 2.5 Build 758
Free Download Manager 3.0 Build 844
Other versions may also be affected.
Free Download Manager is prone to multiple remote buffer-overflow vulnerabilities because the software fails to perform adequate boundary checks on user-supplied input.
Attackers may leverage these issues to execute arbitrary code in the context of the application. Successful exploits may compromise the application and the underlying computer. Failed attacks will cause denial-of-service conditions.
The issues affects the following versions:
Free Download Manager 2.5 Build 758
Free Download Manager 3.0 Build 844
Other versions may also be affected.
Exploit / POC
Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities
Solution:
Reportedly, the vendor released updates to address these issues, but Symantec has not confirmed this information. Please see the references and contact the vendor for more information.
Solution:
Reportedly, the vendor released updates to address these issues, but Symantec has not confirmed this information. Please see the references and contact the vendor for more information.
References
Free Download Manager Torrent File Parsing Multiple Remote Buffer Overflow Vulnerabilities
References:
References:
- Free Download Manager Homepage (Free Download Manager)
- Secunia Research: Free Download Manager Torrent Parsing Buffer Overflows (Secunia Research
- Secunia Research: Free Download Manager Torrent Parsing Buffer Overflows (Secunia Research)