CVE-2010-0189
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1...
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
Exploit likelihood
What each source reports
NVD Score used
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
- Record
CVE-2010-0189- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
- Record
CVE-2010-0189- Updated
- 2026-11-02
EUVDEUVD-2010-0220 No score
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
- Record
EUVD-2010-0220- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h38x-629j-fv6c No score
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1...
A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site.
- Record
GHSA-h38x-629j-fv6c- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0189 is a high vulnerability (CVSS 9.3) in Adobe Download Manager, published February 23, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.18%, the 92nd percentile. No source names a fixed version.
References
adobe.com/support/security/bulletins/apsb10-08.html
securitytracker.com/id?1023651
securityfocus.com/bid/38313
vupen.com/english/advisories/2010/0459
blogs.zdnet.com/security?p=5505
labs.idefense.com/intelligence/vulnerabilities/display.php?id=856
Show 9 moreShow less
akitasecurity.nl/advisory.php?id=AK20090401
aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx
blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html
secunia.com/advisories/38729
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7182
osvdb.org/62547
exchange.xforce.ibmcloud.com/vulnerabilities/56370
nvd.nist.gov/vuln/detail/CVE-2010-0189
github.com/advisories/GHSA-h38x-629j-fv6c