Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2018-25304

Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH

Description

Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured exception handler (SEH) chain exploitation. Attackers can craft a malicious URL file that, when imported through the File > Import > Import lists of downloads menu, causes a buffer overflow in the Location header response that overwrites the SEH chain and executes arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Filehippo Free Download Manager

  • 2.0affected

References