KLA10140 ACE vulnerability in Download Accelerator Plus

A buffer overflow was found in Download Accelerator Plus. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed M3U file.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

Download-Accelerator-Plus

CVE list

CVE-2008-3182 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Speedbit Download Accelerator Plus 8 all versionsSpeedbit Download Accelerator Plus 7 version 7.0.1.3