CVE-2014-2087
published 2014-03-18CVE-2014-2087: Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build…
PriorityP356critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
16.73%
96.6th percentile
Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| freedownloadmanager | free_download_manager | — | — |
| freedownloadmanager | free_download_manager | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://seclists.org/fulldisclosure/2014/Mar/137http://www.securityfocus.com/archive/1/531465/100/0/threadedhttp://www.securityfocus.com/bid/66211https://www.rcesecurity.com/2014/03/cve-2014-2087-free-download-manager-cdownloads_deleted-updatedownload-remote-code-executionhttp://seclists.org/fulldisclosure/2014/Mar/137http://www.securityfocus.com/archive/1/531465/100/0/threadedhttp://www.securityfocus.com/bid/66211https://www.rcesecurity.com/2014/03/cve-2014-2087-free-download-manager-cdownloads_deleted-updatedownload-remote-code-execution
2014-03-18
Published