CVE-2018-25304 - Vulnerability Analysis

Overview

Free Download Manager 2.0 Built 417 contains a buffer overflow caused by improper handling of the Location header in URL import functionality, letting attackers execute arbitrary code via crafted URL files, exploit requires importing malicious URL files.

Severity & Score

Impact

Attackers can execute arbitrary code locally, potentially leading to full system compromise.

Mitigation

Update to the latest version of Free Download Manager.

References

• https://filehippo.com/download_free_download_manager/925/
• https://www.exploit-db.com/exploits/44499
• https://www.vulncheck.com/advisories/free-download-manager-built-417-local-buffer-overflow-seh

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner