CVE-2008-4508

Internet Download Manager - Stack-based Buffer Overflow via Crafted AppleDouble File

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-4508. PoCs published by Ciph3r.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Internet Download Manager (IDM) by sending a maliciously crafted email with an oversized filename in the Content-Disposition header. The payload includes a structured AppleDouble header and a large buffer designed to overwrite memory and potentially execute arbitrary code.

Description

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Ciph3r · perlremotewindows
https://www.exploit-db.com/exploits/32465

This exploit targets a buffer overflow vulnerability in Internet Download Manager (IDM) by sending a maliciously crafted email with an oversized filename in the Content-Disposition header. The payload includes a structured AppleDouble header and a large buffer designed to overwrite memory and potentially execute arbitrary code.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Internet Download Manager (IDM) (version unknown)
No auth needed
Prerequisites: Network access to the target's SMTP port (25) · Target must be using a vulnerable version of IDM
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45711
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31603

Scores

EPSS 0.0572
EPSS Percentile 92.0%

Details

CWE
CWE-119
Status published
Products (1)
tonec_inc./internet_download_manager
Published Oct 09, 2008
Tracked Since Feb 18, 2026