KLA10042 Critical vulnerability in Adobe Download Manager

Detect date:

02/25/2010

Severity:

Critical

Description:

Improper request validation at NOS Microsystems getPlus Download Manager was found in Adobe Download Manager. Malicious users can exploit this vulnerability to bypass security and install arbitrary programs via a specially designed download site name.

Affected products:

Adobe Download Manager versions 1.6.2.60 and earlier

Solution:

Update to latest version

Original advisories:

Adobe bulletin

Impacts:

SB

Related products:

Adobe Download Manager

CVE-IDS:

CVE-2010-01899.3Critical