CVEvulnerability
CVE-2014-2206
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.
Affected configurations
• getgosoft getgo download manager (<= 4.4.5.502)
• getgosoft getgo download manager 4.8.2.1346
• getgosoft getgo download manager 4.9.0.1982
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.rcesecurity.com/2014/03/cve-2014-2206-getgo-download-manager-http-response-header-buffer-overflow-remote-code-execution Exploit
- http://www.securityfocus.com/archive/1/531326/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/65913 Exploit
- http://www.rcesecurity.com/2014/03/cve-2014-2206-getgo-download-manager-http-response-header-buffer-overflow-remote-code-execution Exploit
- http://www.securityfocus.com/archive/1/531326/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/65913 Exploit