Approved changes feed: RSS · Atom

cpe:2.3:a:freedownloadmanager:free_download_manager:3.9.3:*:*:*:*:*:*:*

part: a version: 3.9.3 update: *

VendorFreedownloadmanager (7e6c69d8-4383-565e-a320-a56bd6c7a9f3)
ProductFree Download Manager (7685f09c-4cdb-5e77-b9bb-cbb89216f3b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/l527554/freedownloadmanager purl2cpe 2026-06-01 10:16:17.728179
pkg:github/sab2012/freedownloadmanager purl2cpe 2026-06-01 10:16:17.728180
pkg:github/shayan-to/freedownloadmanager purl2cpe 2026-06-01 10:16:17.728182
pkg:github/svn2github/freedownloadmanager purl2cpe 2026-06-01 10:16:17.728183
pkg:sourceforge/freedownload purl2cpe 2026-06-01 10:16:17.728185

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2087 vulnerable 2026-06-08 05:05:27.537577 Details available
Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user.
Published: 2014-03-18T14:00:00.000Z
Updated: 2024-08-06T09:58:16.318Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.