CVE-2010-0189
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 5.2%
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
Productos afectados
n/a · n/aReferencias
http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspxhttp://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.htmlhttp://blogs.zdnet.com/security/?p=5505http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=856http://secunia.com/advisories/38729http://securitytracker.com/id?1023651https://exchange.xforce.ibmcloud.com/vulnerabilities/56370https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7182http://www.adobe.com/support/security/bulletins/apsb10-08.htmlhttp://www.akitasecurity.nl/advisory.php?id=AK20090401http://www.osvdb.org/62547http://www.securityfocus.com/bid/38313