CVE-2010-0995

Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server.

Score

CVSS 2.0 9.3 Critical

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2010-05-06

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Internet Download Manager (Tonec)

References

• http://secunia.com/advisories/39446
• http://secunia.com/secunia_research/2010-62/
• http://www.internetdownloadmanager.com/news.html
• http://www.securityfocus.com/archive/1/511060/100/0/threaded
• http://www.securityfocus.com/bid/39822