Test Kennung:	1.3.6.1.4.1.25623.1.0.801339
Kategorie:	Buffer overflow
Titel:	Free Download Manager Multiple Buffer Overflow Vulnerabilities
Zusammenfassung:	Free Download Manager is prone to multiple buffer overflow vulnerabilities.
Beschreibung:	Summary: Free Download Manager is prone to multiple buffer overflow vulnerabilities. Vulnerability Insight: Multiple buffer overflow errors exist due to boundary errors when, - opening folders within the 'Site Explorer' - opening websites in the 'Site Explorer' functionality - setting the directory on 'FTP' servers - handling redirects and - Sanitising the 'name' attribute of the 'file' element of metalink files before using it to download files. Vulnerability Impact: Successful exploitation could allow remote attackers to execute arbitrary code in the context of the application or to compromise the application and the underlying computer. Affected Software/OS: Free Download Manager version prior to 3.0 build 852 on Windows. Solution: Upgrade to version 3.0 build 852. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0998 BugTraq ID: 40146 http://www.securityfocus.com/bid/40146 Bugtraq: 20100513 Secunia Research: Free Download Manager Four Buffer Overflow Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/511282/100/0/threaded http://secunia.com/secunia_research/2010-68/ http://osvdb.org/64671 http://osvdb.org/64672 http://osvdb.org/64673 http://osvdb.org/64674 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7006 http://secunia.com/advisories/39447 XForce ISS Database: fdm-siteexplorer-bo(58626) https://exchange.xforce.ibmcloud.com/vulnerabilities/58626 Common Vulnerability Exposure (CVE) ID: CVE-2010-0999 BugTraq ID: 40152 http://www.securityfocus.com/bid/40152 Bugtraq: 20100513 Secunia Research: Free Download Manager metalink "name" Directory Traversal (Google Search) http://www.securityfocus.com/archive/1/511284/100/0/threaded http://secunia.com/secunia_research/2010-67/ http://osvdb.org/64670 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284 XForce ISS Database: fdm-name-directory-traversal(58627) https://exchange.xforce.ibmcloud.com/vulnerabilities/58627
Copyright	Copyright (C) 2010 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.