Internet Download Manager Language File Parsing Buffer Overflow Vulnerability
BID:33934
Info
Internet Download Manager Language File Parsing Buffer Overflow Vulnerability
| Bugtraq ID: | 33934 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 27 2009 12:00AM |
| Updated: | Feb 27 2009 08:37PM |
| Credit: | musashi |
| Vulnerable: |
Internet Download Manager Corp. Internet Download Manager 5.15 Build 3 |
| Not Vulnerable: | |
Discussion
Internet Download Manager Language File Parsing Buffer Overflow Vulnerability
Internet Download Manager (IDM) is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects IDM 5.15 Build 3; other versions may also be vulnerable.
Internet Download Manager (IDM) is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects IDM 5.15 Build 3; other versions may also be vulnerable.
Exploit / POC
Internet Download Manager Language File Parsing Buffer Overflow Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
Internet Download Manager Language File Parsing Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Internet Download Manager Language File Parsing Buffer Overflow Vulnerability
References:
References:
- Internet Download Manager Local Buffer Overflow Vulnerability (SecurityReason)
- Internet Download Manager Homepage (Internet Download Manager Corp.)