« Volver al listado

CVE-2010-0998

Estado: ModificadaAlta (10)—

Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freedownloadmanager — Free Download Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0998",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-05-17T21:00:01.157",
  "references": [
    {
      "url": "http://osvdb.org/64671",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://osvdb.org/64672",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://osvdb.org/64673",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://osvdb.org/64674",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/advisories/39447",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-68/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511282/100/0/threaded",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/40146",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58626",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7006",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://osvdb.org/64671",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/64672",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/64673",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/64674",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/39447",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-68/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511282/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/40146",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58626",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7006",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple stack-based buffer overflows in Free Download Manager (FDM) before 3.0.852 allow remote attackers to execute arbitrary code via vectors involving (1) the folders feature in Site Explorer, (2) the websites feature in Site Explorer, (3) an FTP URI, or (4) a redirect."
    },
    {
      "lang": "es",
      "value": "Múltiple desbordamiento de búfer basado en pila en Free Download Manager (FDM) anteriores a v3.0.852, permite a atacantes remotos ejecutar código de su elección a través de vectores que implican las características (1) \"folders\" en Site Explorer, (2) cathe websites Site Explorer, (3) un FTP URI, o (4) redirect."
    }
  ],
  "lastModified": "2026-06-16T23:17:17.067",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F296836A-9B1E-4AC5-BCC4-CD85BB3C7CAC",
              "versionEndIncluding": "3.0.851"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44845571-0E55-4DE5-B7A4-ED378CFC0E30"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A1DC661-B3C9-4E1E-BF85-B002454068AD"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.700:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAC90ADA-453E-42F5-8812-46B0F46E8AD1"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.704:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD1FF496-02D6-4EDC-AAC5-62D761FFAC3A"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.724:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7AF49E62-4732-42E0-9F71-BCD0F2D06DB5"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.843:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06C04B6B-5BE6-4EB4-9A2D-D07F160B717D"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.848:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D0029A9-61CD-4E75-B964-7585B0D34F3F"
            },
            {
              "criteria": "cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.850:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE441E1D-BB14-4E69-8772-D821AC73588F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}