CVE-2008-4508

Tonec. Internet Download Manager - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Ciph3r · perlremotewindows
https://www.exploit-db.com/exploits/32465

Scores

EPSS 0.0664
EPSS Percentile 91.2%

Details

CWE
CWE-119
Status published
Products (1)
tonec_inc./internet_download_manager
Published Oct 09, 2008
Tracked Since Feb 18, 2026