CVE-2010-0999

HIGH 7.1CVE-2010-0999 · Published 17/05/2010 · updated 16/06/2026

In short

CVE-2010-0999 is a HIGH (CVSS 7.1) vulnerability affecting free download manager (freedownloadmanager).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
free download manager freedownloadmanager	`= 2= 2.1= 2.5.700= 2.5.704= 2.5.724= 3.0.843= 3.0.848= 3.0.850≤ 3.0.851`	No fix yet

Description

Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

References

osvdb.org/64670
secunia.com/secunia_research/2010-67 · Vendor Advisory
securityfocus.com/archive/1/511284/100/0/threaded
securityfocus.com/bid/40152
exchange.xforce.ibmcloud.com/vulnerabilities/58627
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284

More vulnerabilities in free download manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free