Description
Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file.
References
- http://www.zerodayinitiative.com/advisories/ZDI-06-044/
- 20061206 EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability mailing-list
- 23233 third-party-advisory
- VU#448569 third-party-advisory
- 20061207 ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability mailing-list
- 21453 vdb-entry
- adobe-download-aom-bo(30742) vdb-entry
- 20061206 EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability mailing-list
- 1017340 vdb-entry
- ADV-2006-4867 vdb-entry
- http://research.eeye.com/html/advisories/published/AD20061205.html
- http://www.adobe.com/support/security/bulletins/apsb06-19.html