CVE-2014-2206

High

Published: 05/03/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in GetGo Download Manager versions 4.9.0.1982, 4.8.2.1346, 4.4.5.502 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.

Risk Assessment

This vulnerability may lead to system crashes and allow attackers to execute code remotely, posing a significant security threat to the organization.

Recommendation

It is recommended to update GetGo Download Manager to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in GetGo Download Manager

CVE-2017-17849Critical
CVE-2017-17849 describes a buffer overflow vulnerability in GetGo Download Manager version 5.3.0.2712 and earlier. This could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.

Original NVD description (English source)

Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long HTTP Response Header.