CVE-2020-37234
Internet Download Manager 6.38.12 Scheduler Buffer Overflow
CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
0th
Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data exceeding 5000 bytes into the 'Open the following file when done' field to trigger a denial of service condition.
| CWE | CWE-120 |
| Vendor | internetdownloadmanager |
| Product | internet download manager |
| Published | May 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for internetdownloadmanager internet download manager
Be the first to know when new medium vulnerabilities affecting internetdownloadmanager internet download manager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Internetdownloadmanager / Internet Download Manager
6.38.12
References
exploit-db.com: https://www.exploit-db.com/exploits/49083 internetdownloadmanager.com: http://www.internetdownloadmanager.com/ internetdownloadmanager.com: http://www.internetdownloadmanager.com/download.html vulncheck.com: https://www.vulncheck.com/advisories/internet-download-manager-scheduler-buffer-overflow
Credits
Vincent Wolterman