CVE-2010-0995: Tonec Internet Download Manager

High severity, CVSS 9.3. EPSS: 8.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to server.

Affected products

• Tonec Internet Download Manager: up to and including 5.18

Published 2010-05-06. Last modified 2026-06-16.