certfr_avis - CERTA-2010-AVI-089

CERTA-2010-AVI-089

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité non spécifiée dans le produit Adobe Download Manager permet dans certains cas le téléchargement et l'exécution de programmes non sollicités sur l'ordinateur de la victime.

Description

L'installation des produits Adobe Reader ou Adobe Flash Player pour Microsoft Windows repose sur l'utilisation de Adobe Download Manager. Normalement, ce programme Adobe n'est exécuté qu'une seule fois lors de l'installation, puis est automatiquement effacé de l'ordinateur. Dans certains cas, le programme Adobe Download Manager reste présent sur le système, et peut être utilisé par une personne malintentionnée afin de télécharger et d'exécuter des programmes non sollicités sur l'ordinateur de la victime.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Versions de Adobe Download Manager sur les systèmes Microsoft Windows antérieures au 23 février 2010.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CVE-2010-0189 (GCVE-0-2010-0189)

Vulnerability from cvelistv5 – Published: 2010-02-23 20:00 – Updated: 2024-08-07 00:37

Summary

A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.

Severity ?

No CVSS data available.

CWE

Assigner

adobe

References

URL

Tags

	http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
	http://securitytracker.com/id?1023651	vdb-entryx_refsource_SECTRACK
	http://www.securityfocus.com/bid/38313	vdb-entryx_refsource_BID
	http://www.vupen.com/english/advisories/2010/0459	vdb-entryx_refsource_VUPEN
	http://blogs.zdnet.com/security/?p=5505	x_refsource_MISC
	http://labs.idefense.com/intelligence/vulnerabili…	third-party-advisoryx_refsource_IDEFENSE
	http://www.akitasecurity.nl/advisory.php?id=AK20090401	x_refsource_MISC
	http://aviv.raffon.net/2010/02/18/SkeletonsInAdob…	x_refsource_MISC
	http://blogs.adobe.com/psirt/2010/02/adobe_downlo…	x_refsource_MISC
	http://secunia.com/advisories/38729	third-party-advisoryx_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://www.osvdb.org/62547	vdb-entryx_refsource_OSVDB
	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:37:54.133Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb10-08.html"
          },
          {
            "name": "1023651",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023651"
          },
          {
            "name": "38313",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38313"
          },
          {
            "name": "ADV-2010-0459",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0459"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blogs.zdnet.com/security/?p=5505"
          },
          {
            "name": "20100223 Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=856"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.akitasecurity.nl/advisory.php?id=AK20090401"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html"
          },
          {
            "name": "38729",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38729"
          },
          {
            "name": "oval:org.mitre.oval:def:7182",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7182"
          },
          {
            "name": "62547",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/62547"
          },
          {
            "name": "adobe-dlmanager-unspecified-file-download(56370)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56370"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-02-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-18T12:57:01",
        "orgId": "078d4453-3bcd-4900-85e6-15281da43538",
        "shortName": "adobe"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb10-08.html"
        },
        {
          "name": "1023651",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023651"
        },
        {
          "name": "38313",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38313"
        },
        {
          "name": "ADV-2010-0459",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0459"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blogs.zdnet.com/security/?p=5505"
        },
        {
          "name": "20100223 Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=856"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.akitasecurity.nl/advisory.php?id=AK20090401"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html"
        },
        {
          "name": "38729",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38729"
        },
        {
          "name": "oval:org.mitre.oval:def:7182",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7182"
        },
        {
          "name": "62547",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/62547"
        },
        {
          "name": "adobe-dlmanager-unspecified-file-download(56370)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56370"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@adobe.com",
          "ID": "CVE-2010-0189",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb10-08.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb10-08.html"
            },
            {
              "name": "1023651",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023651"
            },
            {
              "name": "38313",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38313"
            },
            {
              "name": "ADV-2010-0459",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0459"
            },
            {
              "name": "http://blogs.zdnet.com/security/?p=5505",
              "refsource": "MISC",
              "url": "http://blogs.zdnet.com/security/?p=5505"
            },
            {
              "name": "20100223 Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=856"
            },
            {
              "name": "http://www.akitasecurity.nl/advisory.php?id=AK20090401",
              "refsource": "MISC",
              "url": "http://www.akitasecurity.nl/advisory.php?id=AK20090401"
            },
            {
              "name": "http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx",
              "refsource": "MISC",
              "url": "http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx"
            },
            {
              "name": "http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html",
              "refsource": "MISC",
              "url": "http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html"
            },
            {
              "name": "38729",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38729"
            },
            {
              "name": "oval:org.mitre.oval:def:7182",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7182"
            },
            {
              "name": "62547",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/62547"
            },
            {
              "name": "adobe-dlmanager-unspecified-file-download(56370)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56370"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
    "assignerShortName": "adobe",
    "cveId": "CVE-2010-0189",
    "datePublished": "2010-02-23T20:00:00",
    "dateReserved": "2010-01-06T00:00:00",
    "dateUpdated": "2024-08-07T00:37:54.133Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted