Vulnerability record · CVE-2004-2433 · published 31 December 2004

CVE-2004-2433: Altnet download manager vulnerability

Altnet · Altnet Download Manager

Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter.

7.5 CVSS 2.0 High EPSS 4.2% · top 9.3%

7.5CVSS 2.0 base score

4.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

3Affected product versions listed by NVD

12References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Altnet Download Manager Altnet

Grokster Grokster KKazaa Media Desktop Kazaa

References

Link	Tags
http://secunia.com/advisories/12446	PatchVendor Advisory
http://secunia.com/advisories/12456	Vendor Advisory
http://securitytracker.com/id?1011155
http://www.osvdb.org/9549
http://www.securityfocus.com/bid/11101	ExploitPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17221
http://secunia.com/advisories/12446	PatchVendor Advisory
http://secunia.com/advisories/12456	Vendor Advisory
http://securitytracker.com/id?1011155
http://www.osvdb.org/9549
http://www.securityfocus.com/bid/11101	ExploitPatch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17221

Track CVE-2004-2433 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2003-1395Kazaa media desktop memory buffer overflow vulnerabilityBuffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a res…EPSS 4.0%31 Dec 2003 7.8CVE-2002-2306Kazaa media desktop vulnerabilitySharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages.EPSS 3.2%31 Dec 2002 7.5CVE-2003-1283Kazaa media desktop vulnerabilityKaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer (IE) local security zone, which could allow remote attackers to view l…EPSS 3.5%31 Dec 2003 7.5CVE-2002-0315Fasttrack kazaa vulnerabilityfasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by modifying the username and networ…EPSS 1.8%25 Jun 2002 6.8CVE-2007-5217Altnet download manager memory buffer overflow vulnerabilityStack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, …EPSS 30%5 Oct 2007 5.0CVE-2002-0314Fasttrack kazaa vulnerabilityfasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustio…EPSS 1.7%25 Jun 2002

Source: NIST National Vulnerability Database (record CVE-2004-2433), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.