Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-2087. PoCs published by Julien Ahrens.
AI-analyzed exploit summary The exploit demonstrates a stack-based buffer overflow in Free Download Manager via a crafted HTTP 301 redirect response. The PoC sends an overly long 'Location' header to trigger the vulnerability in the `CDownloads_Deleted::UpdateDownload` function, leading to potential remote code execution.
Description
Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user.
Exploits (1)
The exploit demonstrates a stack-based buffer overflow in Free Download Manager via a crafted HTTP 301 redirect response. The PoC sends an overly long 'Location' header to trigger the vulnerability in the `CDownloads_Deleted::UpdateDownload` function, leading to potential remote code execution.