CVE-2008-4508

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.

Link	Resource
http://www.securityfocus.com/bid/31603	Exploit
http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/45711

Configuration 1

cpe:2.3:a:tonec_inc.:internet_download_manager:*:*:*:*:*:*:*:* cpe:2.3:a:tonec_inc.:internet_download_manager:*:*:*:*:*:*:*:*

---

Published : 2008-10-09 06:00

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-4508

Mitre link : CVE-2008-4508

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer