OSVDB ID: 85889

Title: Internet Download Manager EF2 File Handling Memory Corruption

Info

Disclosure

Aug 31, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A memory corruption flaw exists in Internet Download Manager. The program fails to sanitize user-supplied input resulting in memory corruption. With a specially crafted EF2 file, a context-dependent attacker can execute arbitrary code.

Classification

Location: Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Solution Unknown
Exploit: Exploit Unknown
Disclosure: Uncoordinated Disclosure

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

Tonec Inc.

Internet Download Manager

Unspecified

References

  • Exploit Database: 20955

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/85889