Security Advisory

CVE-2010-0189

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-02-23 20:00:00

Last updated 2024-08-07 00:37:54

Assigner adobe

CVSS score not scored

State PUBLISHED

Description

A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.

← Browse all CVEs View on cve.org ↗