CVE-2009-2582: Akamai Technologies Download Manager

High severity, CVSS 9.3. EPSS: 3.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in manager.exe in Akamai Download Manager (aka DLM or dlmanager) before 2.2.4.8 allows remote web servers to execute arbitrary code via a malformed HTTP response during a Redswoosh download, a different vulnerability than CVE-2007-1891 and CVE-2007-1892.

Affected products

• Akamai Technologies Download Manager: up to and including 2.2.4.3; version 2.0.4.4 only; version 2.2.0.0 only; version 2.2.1.0 only; version 2.2.3.5 only; version 2.2.3.6 only

Published 2009-07-23. Last modified 2026-06-16.