CVE-2010-0189
Last modified
CVE-2010-0189 is a vulnerability of currently unknown severity. A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.. EPSS estimates a 5.18% chance of exploitation in the next 30 days.
Description
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nos Microsystems | Getplus Download Manager | 1.5.2.35 |
| Adobe | Download Manager | <= 1.6.2.60 |
References
- http://secunia.com/advisories/38729Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-08.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0459Vendor Advisory
- http://secunia.com/advisories/38729Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-08.htmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2010/0459Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0189?
How severe is CVE-2010-0189?
How do I fix CVE-2010-0189?
Are you affected by CVE-2010-0189?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST