CVE-2010-0995

CRÍTICO 9.3CVE-2010-0995 · Published 06/05/2010 · updated 16/06/2026

En resumen

CVE-2010-0995 es una vulnerabilidad CRÍTICO (CVSS 9.3) que afecta a internet download manager (tonec).
Probabilidad de explotación en los próximos 30 días (EPSS): 8.1%, mayor que el 94.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
internet download manager tonec	`≤ 5.18`	No fix yet

Description

Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server.

References

secunia.com/advisories/39446 · Vendor Advisory
secunia.com/secunia_research/2010-62 · Vendor Advisory
internetdownloadmanager.com/news.html
securityfocus.com/archive/1/511060/100/0/threaded
securityfocus.com/bid/39822

Más vulnerabilidades de internet download manager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free