Stack-Based Buffer Overflow in Tonec Internet Download Manager
CVE-2008-4508
Currently unrated
Key Information:
- Vendor
Tonec Inc.
- Vendor
- CVE Published:
- 9 October 2008
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-4508?
A stack-based buffer overflow vulnerability exists in the file parsing function of Tonec Internet Download Manager, specifically in versions up to 5.14. This flaw allows remote attackers to craft an AppleDouble file containing an excessively long string. Such malicious files can lead to denial of service conditions through crashes, and in some scenarios, may enable execution of arbitrary code on the affected system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.