What is CVE-2009-0184?

CVE-2009-0184 is a vulnerability in Free Download Manager, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-02-03.

Is CVE-2009-0184 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Free Download Manager

CVE-2009-0184

Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file.

Vulnerability class: Buffer Overflow

EPSS: 0.278 (97.9th percentile) — read the EPSS interpretation.

Affected products

Free_download_manager — versions 2.5, 3.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2009-0184?: CVE-2009-0184 is a vulnerability in Free Download Manager, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2009-02-03.
Is CVE-2009-0184 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.