Two security vulnerabilities have been discovered in the ActiveX version of Akamai Download Manager, which runs within Internet Explorer. For successful exploitation, both vulnerabilities require the user to visit a malicious URL, triggering a stack-based buffer overflow that allows the attacker to execute arbitrary code within the context of the victim.

Vulnerability CVE-2007-1891 affects versions newer than 2.0.4.4 and older than 2.2.1.0. Vulnerability CVE-2007-1892 affects all versions prior to 2.2.1.0. Both are remediated by installing version 2.2.1.0 and upgrading to this version is recommended.

The Java version of Akamai Download Manager is not affected by either of these vulnerabilities.
These vulnerabilities exist only in the Download Manager client software and do not affect Akamai's services in any way.

Download Manager users running the ActiveX version will be prompted to upgrade to the latest version the next time they use this software. It is critical that users accept the prompt and upgrade the software.

You can upgrade by visiting the following link:
http://dlm.tools.akamai.com/tools/upgrade.html
To verify the correct version is installed:
1) In Internet Explorer, choose "Internet Options..." from the "Tools" menu.
2) Under the "General" tab, select "Settings..." from the "Temporary Internet files"
section.
3) Select "View Objects..." from the "Temporary Internet files
folder" section.
4) Find the item for "DownloadManager Control" and verify that the
version is "2,2,1,0" or higher.
* If you wish to uninstall Download Manager, complete this last step:
5) Find the item for "DownloadManager Control", right-click and
select "Remove".
6) When prompted to confirm, choose "Yes".