CVE-2010-0999

Free Download Manager (FDM) prior to 3.0.852 is vulnerable to a directory-traversal issue in the metalink file’s file element name attribute, allowing remote attackers to create arbitrary files. The stated impact is arbitrary file creation (path traversal). OpenVAS and Secunia references corrobor...

Adobe Download Manager getPlus ActiveX Control Buffer Overflow (APSB10-02; CVE-2009-3958)

Adobe Download Manager DLM is a small application that is used to deliver Adobe products over the Internet. It contains licensed technology from NOS Microsystems called "getPlus" to support the transfer of information between Adobe.com and a connected user. A stack buffer overflow vulnerability...

Free Download Manager multiple security vulnerabilities

Buffer overflows, directory traversals...

ReGet Deluxe .wjr file SaveTo attribute buffer overflow

Added: 05/14/2010 BID: 37511 Background ReGet Deluxe is a download manager for Windows. Problem A buffer overflow vulnerability allows command execution when a user opens a .wjr file containing a Download tag with a specially crafted SaveTo attribute. Resolution Do not open untrusted .wjr files...

Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 13/05/2010 - Free Download Manager Four Buffer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

Secunia Research: Free Download Manager metalink "name" Directory Traversal

====================================================================== Secunia Research 13/05/2010 - Free Download Manager metalink "name" Directory Traversal - ====================================================================== Table of Contents Affected...

Kazaa Altnet Download Manager - ActiveX Control Buffer Overflow (Metasploit)

$Id: kazaaaltnetheap.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2010-0995

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

CVE-2010-0995

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

CVE-2010-0995

The CVE-2010-0995 entry concerns Internet Download Manager (IDM) prior to 5.19. The vulnerability is a stack-based buffer overflow triggered while IDM processes certain FTP URIs, by sending crafted test sequences from client to server, allowing remote code execution. Public sources in the connect...

Tonec Internet Download Manager 5.18 超长FTP URI栈溢出漏洞

BUGTRAQ ID: 39822 CVE ID: CVE-2010-0995 Internet Download Manager是一款下载加速工具。 Internet Download Manager在向FTP服务器发送某些测试序列时存在栈溢出漏洞，用户受骗从特制的FTP URI下载了特制文件就可以触发这个溢出，导致执行任意代码。 Tonec Internet Download Manager 5.18 厂商补丁： Tonec ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.internetdownloadmanager.com/...

Internet Download Manager buffer overflow

Buffer overflow on ftp:// URI processing...

Adobe下载管理器gp.ocx ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 39615 CVE ID: CVE-2010-1278 Adobe Download Manager直接与Adobe服务器配合工作, 可帮助控制Adobe Reader、Adobe Acrobat及其他Adobe文件的下载过程。 Adobe Download Manager所安装的gp.ocx ActiveX控件在初始化期间将两个参数值拷贝到了固定长度的缓冲区，如果用户受骗访问了恶意网页并传送了超长参数就可以触发缓冲区溢出，导致执行任意代码。 Adobe Acrobat 9.x Adobe Acrobat 8.x Adobe Download Manager...

CVE-2010-1278

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

Buffer overflow

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

CVE-2010-1278

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

CVE-2010-1278

CVE-2010-1278 describes a buffer overflow in the gp.ocx ActiveX control (Atlcom.get_atlcom) used by Adobe Download Manager, affecting Adobe Reader/Acrobat 8.x before 8.2 and 9.x before 9.3. During initialization, two parameters are copied into a fixed-length buffer; oversized values can overflow ...

Adobe Download Manager ActiveX buffer overflow

Buffer overflow via parameters...

Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Download Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the gp.ocx ActiveX control. Th...

Firefox: Predictable /tmp pathname use

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...