Tonec

Internet Download Manager

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-90493

Exploit
  • EPSS 0.11%
  • Veröffentlicht 13.09.2026 03:00:09
  • Zuletzt bearbeitet 15.09.2026 15:17:27

A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. A...

9.1

CVE-2025-56231

Exploit
  • EPSS 0.23%
  • Veröffentlicht 05.11.2025 18:15:33
  • Zuletzt bearbeitet 05.07.2026 02:16:58

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.

7.1

CVE-2020-23060

Exploit
  • EPSS 0.41%
  • Veröffentlicht 22.10.2021 20:15:10
  • Zuletzt bearbeitet 21.11.2024 05:13:34

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file.

7.2

CVE-2020-28964

Exploit
  • EPSS 0.41%
  • Veröffentlicht 22.10.2021 20:15:10
  • Zuletzt bearbeitet 21.11.2024 05:23:23

Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors.

9.3

CVE-2010-0995

  • EPSS 7.16%
  • Veröffentlicht 06.05.2010 14:53:01
  • Zuletzt bearbeitet 16.06.2026 23:17:16

Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server.