Unscored severity · published Feb 23, 2010
CVE-2010-0189
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving…
–
CVSS
5.2%
EPSS
No
On KEV
Description
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DM
Download Manager · Adobe
through 1.6.2.60 · source: NVD
GD
Getplus Download Manager · Nos Microsystems
1.5.2.35 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0189
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0189
aviv.raffon.net
http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx
blogs.adobe.com
http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html
blogs.zdnet.com
http://blogs.zdnet.com/security/?p=5505
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=856
Vendor Advisory
http://secunia.com/advisories/38729
securitytracker.com
http://securitytracker.com/id?1023651
More from Download Manager
9.8
CVE-2019-8071
Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability
7.8
CVE-2020-9688
Adobe Download Manager version 2.0.0.518 have a command injection vulnerability
4.9
CVE-2022-2926
Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
–
CVE-2006-5856
Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is…