CVE-2009-0183

Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute…

published February 3, 2009

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
67%
Percentile
99.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack-based buffer overflow in Free Download Manager could let an attacker execute arbitrary code just by sending a long Authorization header in an HTTP request! 🔥 Think of it as a delivery driver who drops off a package without checking the weight limit — if that package is too heavy, it's going to cause some serious damage to the delivery truck! The worst-case scenario? An attacker could gain full control over your system, allowing them to steal sensitive information or manipulate data at will. It's like leaving the door wide open for an intruder to raid your prized possessions!

Put simply

Think of it as a delivery driver who drops off a package without checking the weight limit — if that package is too heavy, it's going to cause some serious damage to the delivery truck! This vulnerability arises from a stack-based buffer overflow in the Remote Control Server of Free Download Manager versions 2.5 Build 758 and 3.0 Build 844. When a long Authorization header is processed, it exceeds the allocated buffer, enabling attackers to execute arbitrary code remotely.

What to do

The worst-case scenario? An attacker could gain full control over your system, allowing them to steal sensitive information or manipulate data at will. It's like leaving the door wide open for an intruder to raid your prized possessions! To safeguard your system, immediately update Free Download Manager to the latest version that addresses this vulnerability. Keeping your software up-to-date will help you avoid these sneaky attacks! 🛡️ You've got this! With the right updates, you'll be ready to defend against any threats! 💪😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.66526 · 99.3th percentile
Published
2009-02-03T19:00Z
EPSS history
Timeline
  • 03 FEB 19:00Z
    Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute…
    cvelistv5