CVE-2020-37234: Internet Download Manager 6.38.12 Scheduler Buffer Overflow
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to trigger a denial of service condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37234?
CVE-2020-37234 is considered to have a moderate severity due to the potential for local attackers to crash the application.
How do I fix CVE-2020-37234?
To fix CVE-2020-37234, you should update Internet Download Manager to the latest version available beyond 6.38.12.
What does CVE-2020-37234 affect?
CVE-2020-37234 affects Internet Download Manager version 6.38.12 specifically.
What is a buffer overflow in CVE-2020-37234?
A buffer overflow in CVE-2020-37234 occurs when oversized input beyond 5000 bytes is supplied to the Scheduler component, leading to application instability.
Who can exploit CVE-2020-37234?
CVE-2020-37234 can be exploited by local attackers who have access to the system running the vulnerable version of Internet Download Manager.