critical10.0Public exploit code
CVE-2014-2206
Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (cras…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GetGo Download Manager 4.9.0.1982 - HTTP Response Header Buffer Overflow Remote Code Execution2014-03-09 · remote · windows · Verified
Impact
Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgosoft | Getgo Download Manager | through 4.4.5.502 Versions 4.8.2.1346, 4.9.0.1982 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.rcesecurity.com/2014/03/cve-2014-2206-getgo-download-manager-http-response-header-buffer-overflow-remote-code-execution
- http://www.securityfocus.com/archive/1/531326/100/0/threaded
- http://www.securityfocus.com/bid/65913
- http://www.rcesecurity.com/2014/03/cve-2014-2206-getgo-download-manager-http-response-header-buffer-overflow-remote-code-execution
- http://www.securityfocus.com/archive/1/531326/100/0/threaded
- http://www.securityfocus.com/bid/65913