This application requires Javascript for optimal performance.

FreeDownloadManager.Torrent.Multitags.Buffer.Overflow

Release Date

Mar 24, 2009

Severity

critical

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a buffer-overflow vulnerability in Free Download Manager.

The vulnerability is caused by a boundary error when the vulnerable software handles a malicious ".torrent" file. It allows a remote attacker to execute arbitrary code.

Affected Products

Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844

Recommended Actions

Upgrade to the latest version 3.0 build 848.

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2009-0184

Reference/s

http://www.securityfocus.com/bid/33555 (BugTraq)

Reference: VID-17300