CVE-2010-0995

CRITICAL 9.3CVE-2010-0995 · Published 06/05/2010 · updated 16/06/2026

In short

CVE-2010-0995 is a CRITICAL (CVSS 9.3) vulnerability affecting internet download manager (tonec).
Chance of exploitation in the next 30 days (EPSS): 8.1%, higher than 94.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
internet download manager tonec	`≤ 5.18`	No fix yet

Description

Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server.

References

secunia.com/advisories/39446 · Vendor Advisory
secunia.com/secunia_research/2010-62 · Vendor Advisory
internetdownloadmanager.com/news.html
securityfocus.com/archive/1/511060/100/0/threaded
securityfocus.com/bid/39822

More vulnerabilities in internet download manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free