critical10.0Public exploit code
CVE-2009-0183
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Free Download Manager 2.5 Build 758 - Remote Control Server Buffer Overflow (Metasploit)2010-07-13 · remote · windows · Verified
- Free Download Manager 2.5/3.0 - Authorisation Stack Buffer Overflow (PoC)2009-02-04 · dos · windows · Verified
Impact
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Free Download Manager | Free Download Manager | Versions 2.5, 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/51745
- http://secunia.com/advisories/33524
- http://secunia.com/secunia_research/2009-3/
- http://www.securityfocus.com/archive/1/500604/100/0/threaded
- http://www.securityfocus.com/bid/33554
- http://www.vupen.com/english/advisories/2009/0302
- https://www.exploit-db.com/exploits/7986
- http://osvdb.org/51745
- http://secunia.com/advisories/33524
- http://secunia.com/secunia_research/2009-3/
- http://www.securityfocus.com/archive/1/500604/100/0/threaded
- http://www.securityfocus.com/bid/33554
- http://www.vupen.com/english/advisories/2009/0302
- https://www.exploit-db.com/exploits/7986