Vulnerability CVE-2014-2206
Published: 2014-03-05

Description:
Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.

See advisories in our WLB2 database:
Topic
Author
Date
High
GetGo Download Manager 4.x Stack Buffer Overflow
RCE
04.03.2014
High
GetGo Download Manager 4.9.0.1982 Remote Code Execution
Julien Ahrens
10.03.2014
High
GetGo Download Manager HTTP Response Buffer Overflow
Gabor
18.01.2015

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Getgosoft -> Getgo download manager 

 References:
http://www.rcesecurity.com/2014/03/cve-2014-2206-getgo-download-manager-http-response-header-buffer-overflow-remote-code-execution
http://www.securityfocus.com/archive/1/531326/100/0/threaded
http://www.securityfocus.com/bid/65913
Copyright 2024, cxsecurity.com

 

Back to Top