Executive brief
Free Download Manager is a popular utility used to manage and accelerate file downloads. A security flaw in version 2.0 Build 417 allows an attacker to take control of a user's computer if the user imports a specially crafted download list file. This could lead to the unauthorized execution of commands, potentially resulting in data theft or full system compromise.
Technical details
A classic stack-based buffer overflow (CWE-120) exists in Free Download Manager 2.0 Build 417 within the URL import functionality. The vulnerability is triggered when the application processes a malicious URL list file via the 'File > Import > Import lists of downloads' menu. Specifically, a long string in a 'Location' header response during the import process causes a buffer overflow that overwrites the Structured Exception Handler (SEH) chain. An attacker can exploit this to gain control of the execution flow and run arbitrary code on the victim's system. While the attack vector is local, it requires no special privileges other than the ability to convince a user to import the malicious file.
Affected products
- Free Download Manager Free Download Manager 2.0 Build 417
Timeline
- 2018-04-23: disclosed: Original exploit published on Exploit-DB
- 2026-04-29: advisory: CVE-2018-25304 published/updated via VulnCheck/NVD