CVE

Id
42773  
CVE No.
CVE-2010-0189  
Status
Candidate  
Description
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.  
Phase
Assigned (20100106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
466513 42773 CVE-2010-0189 IDEFENSE:20100223 Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability  View
466514 42773 CVE-2010-0189 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=856  View
466515 42773 CVE-2010-0189 MISC:http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx  View
466516 42773 CVE-2010-0189 MISC:http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html  View
466517 42773 CVE-2010-0189 MISC:http://blogs.zdnet.com/security/?p=5505  View
466518 42773 CVE-2010-0189 MISC:http://www.akitasecurity.nl/advisory.php?id=AK20090401  View
466519 42773 CVE-2010-0189 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb10-08.html  View
466520 42773 CVE-2010-0189 BID:38313  View
466521 42773 CVE-2010-0189 URL:http://www.securityfocus.com/bid/38313  View
466522 42773 CVE-2010-0189 OSVDB:62547  View
466523 42773 CVE-2010-0189 URL:http://www.osvdb.org/62547  View
466524 42773 CVE-2010-0189 OVAL:oval:org.mitre.oval:def:7182  View
466525 42773 CVE-2010-0189 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7182  View
466526 42773 CVE-2010-0189 SECTRACK:1023651  View
466527 42773 CVE-2010-0189 URL:http://securitytracker.com/id?1023651  View
466528 42773 CVE-2010-0189 SECUNIA:38729  View
466529 42773 CVE-2010-0189 URL:http://secunia.com/advisories/38729  View
466530 42773 CVE-2010-0189 VUPEN:ADV-2010-0459  View
466531 42773 CVE-2010-0189 URL:http://www.vupen.com/english/advisories/2010/0459  View
466532 42773 CVE-2010-0189 XF:adobe-dlmanager-unspecified-file-download(56370)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35569 JVNDB-2010-001349 Adobe Reader および Acrobat における任意のコードを実行される脆弱性 Adobe Reader および Acrobat には、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0193 42773 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001349.html  View