CVE-2009-0184

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 27.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-02-03 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file.

Affected products

Free Download Manager: 2.5, 3.0

References

http://secunia.com/advisories/33524
http://secunia.com/secunia_research/2009-5/
http://www.securityfocus.com/archive/1/500605/100/0/threaded
http://www.securityfocus.com/bid/33555
http://www.vupen.com/english/advisories/2009/0302
http://secunia.com/advisories/33524
http://secunia.com/secunia_research/2009-5/
http://www.securityfocus.com/archive/1/500605/100/0/threaded
http://www.securityfocus.com/bid/33555
http://www.vupen.com/english/advisories/2009/0302

Get alerted when CVE-2009-0184 or the next vulnerability affects your stack