GetGo Download Manager version 6.2.2.3300 contains a buffer overflow (CWE‑787) that allows remote attackers to trigger a denial of service. The vulnerability is triggered when the application receives HTTP responses with header values that exceed the buffer size, causing the program to crash and become unavailable. The primary impact is a loss of availability of the application.

Affected vendor: Getgosoft; affected product: GetGo Download Manager; affected version: 6.2.2.3300. No additional version ranges are provided.

The CVSS score is 8.7, indicating high severity. The EPSS score is <1%, suggesting low likelihood of exploitation in the wild, and the issue is not listed in CISA’s KEV catalog. Exploitation requires an attacker control over a remote HTTP service that can deliver excessively long header values to the target application. The attack vector is remote via malicious HTTP responses.