CVE-2020-37234CWE-120

CVE-2020-37234

Medium · published May 16, 2026

CVSS v3.1
6.2
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to trigger a denial of service condition.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-05-16T20:16Z
References (4)
http://www.internetdownloadmanager.com/ · [email protected]http://www.internetdownloadmanager.com/download.html · [email protected]https://www.exploit-db.com/exploits/49083 · [email protected]https://www.vulncheck.com/advisories/internet-download-manager-scheduler-buffer-overflow · [email protected]
EPSS history
Timeline
  • 16 MAY 15:25Z
    Internet Download Manager 6.38.12 Scheduler Buffer Overflow
    cvelistv5