SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2009-2582

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than…

HIGH 9.3EPSS 3.31%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.

CVSS 2.0
9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
3.31% probability · 88th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-119
Affected
akamai technologies/download manager
Source
cve@mitre.org
EPSS trend
0%3%5%26 October 2026: 3.31%26 October 202626 October 2026

EPSS 3.3% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.