Main Vulnerability Database Vulnerabilities #VU21803

Stack-based buffer overflow in Adobe Download Manager - CVE-2006-5856

Published: October 15, 2019

Vulnerability identifier: #VU21803

CSH Severity: High

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2006-5856

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing long string from the dm.ini file, which is populated via an AOM file. A remote unauthenticated attacker can trick the nvictim into visiting a malicious website, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Adobe Download Manager

How to mitigate CVE-2006-5856

Install update from vendor's website.

Adobe Download Manager - update to 2.2

External References

Related Security Bulletins