exploitDog

CVE-2008-4508

Опубликовано: 09 окт. 2008

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tonec_inc.:internet_download_manager:*:*:*:*:*:*:*:*

cpe:2.3:a:tonec_inc.:internet_download_manager:*:*:*:*:*:*:*:*

Версия до 5.14 (включая)

EPSS

Процентиль: 91%

0.06636

Низкий

7.8 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-c9r5-gvxf-ww2h

github

почти 4 года назад

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.

EPSS

Процентиль: 91%

0.06636

Низкий

7.8 High

CVSS2

Дефекты

CWE-119