NVD

Id
11764  
Name
CVE-2010-0189  
Description
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-02-23  
Modified Date
2010-08-21  
Seq
2010-0189  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64775 11764 CVE-2010-0189 http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx  View
64776 11764 CVE-2010-0189 http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html  View
64777 11764 CVE-2010-0189 http://blogs.zdnet.com/security/?p=5505  View
64778 11764 CVE-2010-0189 20100223 Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability  View
64779 11764 CVE-2010-0189 oval:org.mitre.oval:def:7182  View
64780 11764 CVE-2010-0189 1023651  View
64781 11764 CVE-2010-0189 http://www.adobe.com/support/security/bulletins/apsb10-08.html  View
64782 11764 CVE-2010-0189 http://www.akitasecurity.nl/advisory.php?id=AK20090401  View
64783 11764 CVE-2010-0189 38313  View
64784 11764 CVE-2010-0189 ADV-2010-0459  View
64785 11764 CVE-2010-0189 adobe-dlmanager-unspecified-file-download(56370)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35365 JVNDB-2010-001145 Adobe Download Manager における任意のプログラムをダウンロードおよびインストールされる脆弱性 Adobe Download Manager で使用される NOS Microsystems getPlus Download Manager の ActiveX control には、サブドメインがないウェブサイトのリクエストの処理に不備があるため、任意のプログラムをダウンロードおよびインストールされる脆弱性が存在します。 CVE-2010-0189 42769 CVE-2010-0189 11764 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001145.html 2010-02-23 2010-03-11 View