Two vulnerabilities have been reported in Akamai Download Manager ActiveX control, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to boundary errors within the Download Manager ActiveX control (DownloadManagerV2.ocx) and can be exploited to cause stack-based buffer overflows e.g. when a user visits a malicious web site.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities reportedly affect all versions prior to 2.2.1.0.

Solution
Update to version 2.2.1.0.
Further details available to Secunia VIM customers

Provided and/or discovered by
* Reported by the vendor.
* Discovered by McSlibin and reported via iDefense Labs.
* The vendor also credits Fortinet.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Akamai:
http://lists.grok.org.uk/pipermail/full-disclosure/2007-April/053794.html

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=514

Fortinet:
http://www.fortiguardcenter.com/advisory/FGA-2007-05.html

Other references
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers