CVE-2009-0183

Published: Feb 3, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.

Affected (2)

Products: Free Download Manager: Free Download Manager

Free Download Manager

1 product

Free Download Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Free Download Manager Free Download Manager	Version 2.5
Free Download Manager Free Download Manager	Version 3.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://osvdb.org/51745

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/33524

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2009-3/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/archive/1/500604/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/33554

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2009/0302

Source: PSIRT-CNA@flexerasoftware.com

https://www.exploit-db.com/exploits/7986

Source: PSIRT-CNA@flexerasoftware.com

http://osvdb.org/51745