CVE-2008-4508

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-10-09 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.

Affected products

Tonec Inc. Internet Download Manager: through 5.14

References

http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl
http://www.securityfocus.com/bid/31603
https://exchange.xforce.ibmcloud.com/vulnerabilities/45711
http://downloads.securityfocus.com/vulnerabilities/exploits/31603.pl
http://www.securityfocus.com/bid/31603
https://exchange.xforce.ibmcloud.com/vulnerabilities/45711

Get alerted when CVE-2008-4508 or the next vulnerability affects your stack