Vulnerability Details CVE-2010-0999
Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.1%
CVSS Severity
CVSS v2 Score 7.1
References
- http://osvdb.org/64670
- http://secunia.com/secunia_research/2010-67/
- http://www.securityfocus.com/archive/1/511284/100/0/threaded
- http://www.securityfocus.com/bid/40152
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58627
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284
- http://osvdb.org/64670
- http://secunia.com/secunia_research/2010-67/
- http://www.securityfocus.com/archive/1/511284/100/0/threaded
- http://www.securityfocus.com/bid/40152
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58627
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7284
Products affected by CVE-2010-0999
-
cpe:2.3:a:freedownloadmanager:free_download_manager:-
-
cpe:2.3:a:freedownloadmanager:free_download_manager:2
-
cpe:2.3:a:freedownloadmanager:free_download_manager:2.0
-
cpe:2.3:a:freedownloadmanager:free_download_manager:2.1
-
cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.700
-
cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.704
-
cpe:2.3:a:freedownloadmanager:free_download_manager:2.5.724
-
cpe:2.3:a:freedownloadmanager:free_download_manager:3.0
-
cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.843
-
cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.848
-
cpe:2.3:a:freedownloadmanager:free_download_manager:3.0.850