CVE-2010-0998
Last modified
CVE-2010-0998 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect.. EPSS estimates a 6.43% chance of exploitation in the next 30 days.
Description
Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Freedownloadmanager | Free Download Manager | <= 3.0.851 |
| Freedownloadmanager | Free Download Manager | 2 |
| Freedownloadmanager | Free Download Manager | 2.1 |
| Freedownloadmanager | Free Download Manager | 2.5.700 |
| Freedownloadmanager | Free Download Manager | 2.5.704 |
| Freedownloadmanager | Free Download Manager | 2.5.724 |
| Freedownloadmanager | Free Download Manager | 3.0.843 |
| Freedownloadmanager | Free Download Manager | 3.0.848 |
| Freedownloadmanager | Free Download Manager | 3.0.850 |
References
- http://secunia.com/advisories/39447Vendor Advisory
- http://secunia.com/secunia_research/2010-68/Vendor Advisory
- http://secunia.com/advisories/39447Vendor Advisory
- http://secunia.com/secunia_research/2010-68/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0998?
How severe is CVE-2010-0998?
How do I fix CVE-2010-0998?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0992Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2010-0993Unrestricted file upload vulnerability in Pulse CMS Basic 1.…
- CVE-2010-0994Multiple buffer overflows in src/vl/vlDAT.cpp in Visualizati…
- CVE-2010-0995Stack-based buffer overflow in Internet Download Manager (ID…
- CVE-2010-0996Unrestricted file upload vulnerability in e107 before 0.7.20…
- CVE-2010-0997Cross-site scripting (XSS) vulnerability in 107_plugins/cont…
- CVE-2010-0999Directory traversal vulnerability in Free Download Manager (…
- CVE-2010-1000Directory traversal vulnerability in KGet in KDE SC 4.0.0 th…
- CVE-2010-10001A vulnerability, which was classified as problematic, was fo…5.5
- CVE-2010-10002** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…6.1
- CVE-2010-10003A vulnerability classified as critical was found in gesellix…9.8
- CVE-2010-10004A vulnerability was found in Information Cards Module on sim…6.1
Are you affected by CVE-2010-0998?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST