CVE-2008-4508

EUVD-2008-4489
Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string.  NOTE: this is probably a different vulnerability than CVE-2005-2210.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
tonec_inc.internet_download_manager
𝑥
≤ 5.14
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl
http://www.securityfocus.com/bid/31603
https://exchange.xforce.ibmcloud.com/vulnerabilities/45711
http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl
http://www.securityfocus.com/bid/31603
https://exchange.xforce.ibmcloud.com/vulnerabilities/45711