high7.8Public exploit code
CVE-2008-4508
Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a deni…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Internet Download Manager 4.0.5 - File Parsing Buffer Overflow2008-10-06 · remote · windows · Verified
Impact
Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tonec Inc. | Internet Download Manager | All versions through 5.14 |
Weakness classification
References
- NVD record
- CVE.org record
- http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl
- http://www.securityfocus.com/bid/31603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45711
- http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl
- http://www.securityfocus.com/bid/31603
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45711