critical9.8Public exploit code
CVE-2017-17849
A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GetGo Download Manager 6.2.1.3200 - Denial of Service (PoC)2018-07-25 · dos · windows
- GetGo Download Manager 5.3.0.2712 - Buffer Overflow2017-12-26 · dos · windows
Impact
A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgosoft | Getgo Download Manager | through 5.3.0.2712 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/145530/GetGo-Download-Manager-5.3.0.2712-Buffer-Overflow.html
- https://www.exploit-db.com/exploits/43391/
- https://www.exploit-db.com/exploits/45087/
- https://packetstormsecurity.com/files/145530/GetGo-Download-Manager-5.3.0.2712-Buffer-Overflow.html
- https://www.exploit-db.com/exploits/43391/
- https://www.exploit-db.com/exploits/45087/