exploitDog

CVE-2009-2582

Опубликовано: 23 июл. 2009

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:akamai_technologies:download_manager:*:*:*:*:*:*:*:*

Версия до 2.2.4.3 (включая)

cpe:2.3:a:akamai_technologies:download_manager:2.0.4.4:*:*:*:*:*:*:*

cpe:2.3:a:akamai_technologies:download_manager:2.2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:akamai_technologies:download_manager:2.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:akamai_technologies:download_manager:2.2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:akamai_technologies:download_manager:2.2.3.6:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02521

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-mmg7-q8j9-f8wj

github

почти 4 года назад

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.

EPSS

Процентиль: 85%

0.02521

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-119