CVE-2006-5856 Memory corruption in n/a

What is CVE-2006-5856?

CVE-2006-5856 is a medium-severity memory corruption vulnerability in n/a, published on 6 Dec 2006. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file.

Which versions are affected by CVE-2006-5856?

It affects 1 product.

Products include Adobe Download Manager.

How do I fix CVE-2006-5856?

No fix has been published for CVE-2006-5856 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2006-5856 being exploited?

There is no known exploitation of CVE-2006-5856 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2019-8071 Privilege escalation in Adobe Download Manager Critical 9.8
• CVE-2010-0189 Other in n/a Critical 9.3
• CVE-2020-9688 Command injection in Adobe Download Manager High 7.8
• CVE-2022-2926 Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal Medium 4.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c9j7-w5qx-fvjx.