CVE-2010-0995

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

CVE-2010-0995

Stack-based buffer overflow in Internet Download Manager IDM before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server...

CVE-2010-0995

The CVE-2010-0995 entry concerns Internet Download Manager (IDM) prior to 5.19. The vulnerability is a stack-based buffer overflow triggered while IDM processes certain FTP URIs, by sending crafted test sequences from client to server, allowing remote code execution. Public sources in the connect...

Tonec Internet Download Manager 5.18 超长FTP URI栈溢出漏洞

BUGTRAQ ID: 39822 CVE ID: CVE-2010-0995 Internet Download Manager是一款下载加速工具。 Internet Download Manager在向FTP服务器发送某些测试序列时存在栈溢出漏洞，用户受骗从特制的FTP URI下载了特制文件就可以触发这个溢出，导致执行任意代码。 Tonec Internet Download Manager 5.18 厂商补丁： Tonec ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.internetdownloadmanager.com/...

Internet Download Manager buffer overflow

Buffer overflow on ftp:// URI processing...

Adobe下载管理器gp.ocx ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 39615 CVE ID: CVE-2010-1278 Adobe Download Manager直接与Adobe服务器配合工作, 可帮助控制Adobe Reader、Adobe Acrobat及其他Adobe文件的下载过程。 Adobe Download Manager所安装的gp.ocx ActiveX控件在初始化期间将两个参数值拷贝到了固定长度的缓冲区，如果用户受骗访问了恶意网页并传送了超长参数就可以触发缓冲区溢出，导致执行任意代码。 Adobe Acrobat 9.x Adobe Acrobat 8.x Adobe Download Manager...

CVE-2010-1278

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

Buffer overflow

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

CVE-2010-1278

CVE-2010-1278 describes a buffer overflow in the gp.ocx ActiveX control (Atlcom.get_atlcom) used by Adobe Download Manager, affecting Adobe Reader/Acrobat 8.x before 8.2 and 9.x before 9.3. During initialization, two parameters are copied into a fixed-length buffer; oversized values can overflow ...

CVE-2010-1278

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters...

Adobe Download Manager ActiveX buffer overflow

Buffer overflow via parameters...

Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Download Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the gp.ocx ActiveX control. Th...

Firefox: Predictable /tmp pathname use

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...

Firefox: Predictable /tmp pathname use

Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...

getPlus insufficient domain name validation vulnerability

------------------------------------------------------------------------ getPlus insufficient domain name validation vulnerability ------------------------------------------------------------------------ Yorick Koster, April 2009...

Adobe Download Manager Arbitrary File Download (APSB10-08)

The remote Windows host has a version of Adobe Download Manager earlier than 1.6.2.63 installed. Such versions are potentially affected by a vulnerability that allows an attacker to download and install unauthorized software onto a user's system. C Tenable Network Security, Inc. include...

KLA10042 Critical vulnerability in Adobe Download Manager

Improper request validation at NOS Microsystems getPlus Download Manager was found in Adobe Download Manager. Malicious users can exploit this vulnerability to bypass security and install arbitrary programs via a specially designed download site name. Original advisories Adobe bulletin Related...

iDefense Security Advisory 02.23.10: Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability

iDefense Security Advisory 02.23.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 23, 2010 I. BACKGROUND The getPlus Downloader is an application download and installation manager, distributed in the form of an ActiveX control. This control is used by Adobe Systems Inc. to install...

Adobe Download Manager File Download and Execution Vulnerability

CVE-2010-0189 A vulnerability has been identified in Adobe Download Manager, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by an error when processing URLs, which could be exploited by attackers to download and install unauthorized software...

Adobe Releases a Security Update for Download Manager

Adobe has released a security bulletin to address a vulnerability in the Adobe Download Manager. This vulnerability could allow an attacker to download and install unauthorized software. US-CERT encourages users and administrators to review security bulletin APSB10-08 and review the steps to...