Approved changes feed: RSS · Atom

cpe:2.3:a:freedownloadmanager:free_download_manager:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorFreedownloadmanager (7e6c69d8-4383-565e-a320-a56bd6c7a9f3)
ProductFree Download Manager (7685f09c-4cdb-5e77-b9bb-cbb89216f3b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/l527554/freedownloadmanager purl2cpe 2026-06-01 10:16:17.715268
pkg:github/sab2012/freedownloadmanager purl2cpe 2026-06-01 10:16:17.715269
pkg:github/shayan-to/freedownloadmanager purl2cpe 2026-06-01 10:16:17.715271
pkg:github/svn2github/freedownloadmanager purl2cpe 2026-06-01 10:16:17.715272
pkg:sourceforge/freedownload purl2cpe 2026-06-01 10:16:17.715274

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25304 vulnerable 2026-06-08 05:11:29.755850 Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH
HIGH (8.4)
Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured exception handler (SEH) chain exploitation. Attackers can craft a malicious URL file that, when imported through the File > Import > Import lists of downloads menu, causes a buffer overflow in the Location header response that overwrites the SEH chain and executes arbitrary code.
Published: 2026-04-29T19:24:36.594Z
Updated: 2026-05-26T11:51:32.752Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.