CVE-2020-37234

Internet Download Manager 6.38.12 Scheduler Buffer Overflow

CVSS 6.9 MEDIUMEPSS 0.1%CWE-120

Vexday Risk Score

33Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 6.9EPSS 0.1%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Ciclo de vida

16 may 2026Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to trigger a denial of service condition.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Productos afectados

Internetdownloadmanager · Internet Download Manager

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/49083no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

https://www.exploit-db.com/exploits/49083 https://www.vulncheck.com/advisories/internet-download-manager-scheduler-buffer-overflow http://www.internetdownloadmanager.com/http://www.internetdownloadmanager.com/download.html