What is CVE-2014-2087?

CVE-2014-2087 is a vulnerability in Freedownloadmanager Free Download Manager, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-03-18.

Is CVE-2014-2087 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Freedownloadmanager Free Download Manager

CVE-2014-2087

Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user.

Vulnerability class: Buffer Overflow

EPSS: 0.167 (96.7th percentile) — read the EPSS interpretation.

Affected products

Freedownloadmanager Free_download_manager — versions 3.8, 3.9.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)

Frequently asked questions

What is CVE-2014-2087?: CVE-2014-2087 is a vulnerability in Freedownloadmanager Free Download Manager, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-03-18.
Is CVE-2014-2087 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.