CVE-2010-0999: Freedownloadmanager Free Download Manager

High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Free Download Manager (FDM) before 3.0.852 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Affected products

• Freedownloadmanager Free Download Manager: up to and including 3.0.851; version 2 only; version 2.1 only; version 2.5.700 only; version 2.5.704 only; version 2.5.724 only; …

Published 2010-05-17. Last modified 2026-06-16.