← Vulnerability feed

Vulnerability record · CVE-2006-5856 · published 6 December 2006

CVE-2006-5856: Adobe download manager vulnerability

Adobe · Download Manager

Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file.

6.8 CVSS 2.0 Medium EPSS 15% · top 3.4%
6.8CVSS 2.0 base score
15%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
24References
16 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section name in the dm.ini file, which is populated via an AOM file.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051114.html
http://research.eeye.com/html/advisories/published/AD20061205.html PatchVendor Advisory
http://secunia.com/advisories/23233
http://securitytracker.com/id?1017340
http://www.adobe.com/support/security/bulletins/apsb06-19.html Patch
http://www.kb.cert.org/vuls/id/448569 US Government Resource
http://www.securityfocus.com/archive/1/453636/100/0/threaded
http://www.securityfocus.com/archive/1/453755/100/0/threaded
http://www.securityfocus.com/bid/21453 PatchVendor Advisory
http://www.vupen.com/english/advisories/2006/4867
http://www.zerodayinitiative.com/advisories/ZDI-06-044/
https://exchange.xforce.ibmcloud.com/vulnerabilities/30742
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051114.html
http://research.eeye.com/html/advisories/published/AD20061205.html PatchVendor Advisory
http://secunia.com/advisories/23233
http://securitytracker.com/id?1017340
http://www.adobe.com/support/security/bulletins/apsb06-19.html Patch
http://www.kb.cert.org/vuls/id/448569 US Government Resource
http://www.securityfocus.com/archive/1/453636/100/0/threaded
http://www.securityfocus.com/archive/1/453755/100/0/threaded
http://www.securityfocus.com/bid/21453 PatchVendor Advisory
http://www.vupen.com/english/advisories/2006/4867
http://www.zerodayinitiative.com/advisories/ZDI-06-044/
https://exchange.xforce.ibmcloud.com/vulnerabilities/30742

Track CVE-2006-5856 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-8071Adobe download manager incorrect permission assignment vulnerabilityAdobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation.EPSS 3.3%9.3CVE-2010-0189Nos microsystems getplus download manager improper input validation vulnerabilityA certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperl…EPSS 5.2%7.8CVE-2020-9688Adobe download manager command injection vulnerabilityAdobe Download Manager version 2.0.0.518 have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.EPSS 4.8%4.9CVE-2022-2926Adobe download manager path traversal vulnerabilityThe Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to li…EPSS 1.7%

Source: NIST National Vulnerability Database (record CVE-2006-5856), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.