KLA10040 RCE vulnerability in Adobe Download Manager

An unspecified vulnerability was found in Adobe Download Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from network at a point related to a dm.ini file via a stack-based buffer overflow.

Original advisories

Adobe bulletin

Related products

Adobe-Download-Manager

CVE list

CVE-2006-5856 high

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Adobe Download Manager versions 2.1 and earlier