CVE-2008-4508: Tonec Inc. Internet Download Manager

High severity, CVSS 7.8. EPSS: 5.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AppleDouble file containing a long string. NOTE: this is probably a different vulnerability than CVE-2005-2210.

Affected products

• Tonec Inc. Internet Download Manager: any version; up to and including 5.14

Published 2008-10-09. Last modified 2026-06-16.