CVE		CVE-2009-0187
Status		Candidate
Description		Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.
Severity		High
CVSS score		9,3
CVSS vector		(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Phase		Assigned (27.04.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0187
References		BID : 33894
		BUGTRAQ : 20090225 Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow
		MISC : http://secunia.com/secunia_research/2009-9/
		SECUNIA : 33843
		VUPEN : ADV-2009-0521
SecurityVulns:		Orbit Downloader buffer overflow