2024-07-14 02:06:08 +00:00

163 lines
5.5 KiB
JSON

{
"id": "CVE-2010-0998",
"sourceIdentifier": "PSIRT-CNA@flexerasoftware.com",
"published": "2010-05-17T21:00:01.157",
"lastModified": "2018-10-10T19:55:17.353",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect."
},
{
"lang": "es",
"value": "M\u00faltiple desbordamiento de b\u00fafer basado en pila en Free Download Manager (FDM) anteriores a v3.0.852, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores que implican las caracter\u00edsticas (1) \"folders\" en Site Explorer, (2) cathe websites Site Explorer, (3) un FTP URI, o (4) redirect."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.0.851",
"matchCriteriaId": "F296836A-9B1E-4AC5-BCC4-CD85BB3C7CAC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2:*:*:*:*:*:*:*",
"matchCriteriaId": "44845571-0E55-4DE5-B7A4-ED378CFC0E30"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9A1DC661-B3C9-4E1E-BF85-B002454068AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.700:*:*:*:*:*:*:*",
"matchCriteriaId": "DAC90ADA-453E-42F5-8812-46B0F46E8AD1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.704:*:*:*:*:*:*:*",
"matchCriteriaId": "CD1FF496-02D6-4EDC-AAC5-62D761FFAC3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.724:*:*:*:*:*:*:*",
"matchCriteriaId": "7AF49E62-4732-42E0-9F71-BCD0F2D06DB5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.843:*:*:*:*:*:*:*",
"matchCriteriaId": "06C04B6B-5BE6-4EB4-9A2D-D07F160B717D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.848:*:*:*:*:*:*:*",
"matchCriteriaId": "9D0029A9-61CD-4E75-B964-7585B0D34F3F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.850:*:*:*:*:*:*:*",
"matchCriteriaId": "BE441E1D-BB14-4E69-8772-D821AC73588F"
}
]
}
]
}
],
"references": [
{
"url": "http://osvdb.org/64671",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://osvdb.org/64672",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://osvdb.org/64673",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://osvdb.org/64674",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/39447",
"source": "PSIRT-CNA@flexerasoftware.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://secunia.com/secunia_research/2010-68/",
"source": "PSIRT-CNA@flexerasoftware.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securityfocus.com/archive/1/511282/100/0/threaded",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/bid/40146",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58626",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7006",
"source": "PSIRT-CNA@flexerasoftware.com"
}
]
}