Orbit Downloader buffer overflow
Published:		26.02.2009
Source:		BUGTRAQ
SecurityVulns ID:		9694
Type:		client
Level:		5/10
Description:		Buffer overflow on oversized URL.

Affected:		ORBITDOWNLOADER : Orbit Downloader 2.8
CVE:		CVE-2009-0187 (Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.)

Original document

SECUNIA, Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow (26.02.2009)

Discuss:

Read or add your comments to this news (0 comments)