Unscored severity · published Dec 8, 2008
CVE-2008-5364
Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process…
–
CVSS
4%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the getPlus ActiveX control in gp.ocx 1.2.2.50 in NOS Microsystems getPlus Download Manager, as used for the Adobe Reader 8.1 installation process and other downloads, allows remote attackers to execute arbitrary code via unspecified vectors, a different issue than CVE-2008-4817.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Getplus Download Manager · Nos Microsystems
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5364
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5364
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=754
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb08-19.html
www.securityfocus.com
http://www.securityfocus.com/bid/32105
Vendor Advisory
http://www.vupen.com/english/advisories/2008/3002
More from Getplus Download Manager
–
CVE-2010-0189
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving…
–
CVE-2009-2564
NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other…