Filtered by vendor Tonec Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-37234 1 Tonec 1 Internet Download Manager 2026-05-16 6.2 Medium
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to trigger a denial of service condition.
CVE-2025-56231 1 Tonec 1 Internet Download Manager 2026-01-07 9.1 Critical
Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.
CVE-2010-0995 1 Tonec 1 Internet Download Manager 2025-04-11 N/A
Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server.
CVE-2020-28964 1 Tonec 1 Internet Download Manager 2024-11-21 6.7 Medium
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors.
CVE-2020-23060 1 Tonec 1 Internet Download Manager 2024-11-21 7.1 High
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file.