CVE-2014-2087: Freedownloadmanager Free Download Manager

High severity, CVSS 9.3. EPSS: 16.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user.

Affected products

• Freedownloadmanager Free Download Manager: version 3.8 only; version 3.9.3 only

Published 2014-03-18. Last modified 2026-06-17.