CVE-2009-0184
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 27.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 27.80% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- free download manager/free download manager
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://secunia.com/advisories/33524Vendor Advisory
- http://secunia.com/secunia_research/2009-5/Vendor Advisory
- http://www.securityfocus.com/archive/1/500605/100/0/threaded
- http://www.securityfocus.com/bid/33555
- http://www.vupen.com/english/advisories/2009/0302
- http://secunia.com/advisories/33524Vendor Advisory
- http://secunia.com/secunia_research/2009-5/Vendor Advisory
- http://www.securityfocus.com/archive/1/500605/100/0/threaded
- http://www.securityfocus.com/bid/33555
- http://www.vupen.com/english/advisories/2009/0302
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.